Information Asset and Data Flow Mapping Tool

Tender description

NEL CSU is seeking a proposal from interested bidders to provide a software solution to deliver a system to enable effective data flow mapping and asset management across the CSU and its customer base. The successful bidder must be able to provide a software solution that will enable NEL CSU and it's customers to meet GDPR - Articles 3, 28-31 and Recitals 22-25, 81-82, which requires Data Controllers and Data Processors to adhere to legal requirements which include records of processing, which comprise a register of Information Assets and data flow mapping as the record of processing. In particular the software solution must provide the business with (a) clarity of what flows of PCD they have, (b) visibility of inherent risks and controls, (c) the means of exercising management control of them and (d), the ability to make useful Management Information (MI) available to inform decision making.