Supply chain

The request was successful.

Dear Derbyshire County Council,

Has your organisation ever suffered a cyber security incident through a third-party provider; that is, an attack which infiltrated your IT systems through an outside partner, provider or vendor?
- Yes
- No

If yes, did this occur within the last 12 months?
- Yes
- No

Do you have a list of all the third parties that your organisation shares sensitive data with?
- Yes
- No

In terms of cyber security governance processes, do you have clear criteria that third parties - suppliers or those in which there are dependencies within the supply chain - must comply with in order to do business with them?
- Yes
- No

If Yes, please indicate all that apply:
- Suppliers must assure their cyber security against the HMG Cyber Security Standard
- Suppliers must demonstrate that they hold a valid Cyber Essentials Certificate.
- Suppliers must demonstrate compliance with the Payment Card Industry (PCI) DSS standard
- Other: please indicate:

How often do you reassess third party or suppliers’ security measures to ensure they still meet the minimum criteria?
- At least every 12 months
- At least every 2 years
- More than every 2 years.
- We don’t reassess

Have you revisited these requirements to ensure compliance with the General Data Protection Regulation (GDPR)?
- Yes
- No

Do you have policies in place for privileged access management?
- Yes
- No

Thank you for your time.

Yours faithfully,

Gabby Dunne

Access 2 Info (Commissioning Communities and Policy), Derbyshire County Council

Dear Ms Dunne,

I refer to your request for Information received on 22 November 2018.

We will be dealing with your request under the Freedom of Information Act 2000. In accordance with the legislation, the deadline for responding is 20 working days from the receipt of the request, this being 21 December 2018. However, we shall endeavour to deal with your request promptly, and if possible before this date.

Yours Sincerely

Justin Hird
Legal Assistant
Derbyshire County Council
County Hall
Matlock
DE4 3AG

Telephone: 01629 539336

PUBLIC – This email includes information which is not personal.

Change lives – foster for Derbyshire. Find out more on our website<http://www.derbyshire.gov.uk/fostering>.
Think before you print! Save energy and paper. Do you really need to print this email?

Derbyshire County Council works to improve the lives of local people by delivering high quality services. You can find out more about us by visiting 'www.derbyshire.gov.uk'. If you want to work for us go to our job pages on 'www.derbyshire.gov.uk/jobs'. You can register for e-mail alerts, download job packs and apply on-line.

show quoted sections

This email or email thread section has been clasified PUBLIC - This email includes information which is not personal.

Sarah Wheeldon (Commissioning Communities and Policy), Derbyshire County Council

1 Attachment

Dear Ms Dunne

 

Please find attached a response to your Freedom of Information Request
dated 22 November 2018.

 

Kind Regards,

 

Sarah Wheeldon

Service Review Officer | Finance & ICT Service | Commissioning,
Communities and Policy | Derbyshire County Council | County Hall, Matlock,
Derbyshire DE4 3AG | 
Visit us at [1]www.derbyshire.gov.uk | Follow us on [2]Twitter | Find us
on [3]Facebook |

 

Action Grants – apply now for cash for community activities. Find out more
on our [4]website.

Think before you print! Save energy and paper. Do you really need to print
this email?

Derbyshire County Council works to improve the lives of local people by
delivering high quality services. You can find out more about us by
visiting 'www.derbyshire.gov.uk'. If you want to work for us go to our job
pages on 'www.derbyshire.gov.uk/jobs'. You can register for e-mail alerts,
download job packs and apply on-line.

show quoted sections

This email or email thread section has been clasified PUBLIC - This email
includes information which is not personal.

References

Visible links
1. http://www.derbyshire.gov.uk/
2. http://www.twitter.com/derbyshirecc
3. http://www.facebook.com/derbyshirecc
4. http://www.derbyshire.gov.uk/action