Appendix 1

Follow up of agreed actions

Audit	Action	Agreed Date	Responsible Officer	Name of Officer	Action Completed?
IT Security 2021/22	1.1 The BC and DR plans will be reviewed and updated to meet current Pensions Regulator standards. The BC plan will be updated to include arrangements for plan testing, post-incident reviews, and for contacting external stakeholders. 1.2 The plans will be reviewed annually, and this review will be included in the governance document review tracker.	31/03/2023	Head of Pensions Administration	Phillippa Cockerill	Delayed, review scheduled for summer 2023
IT Security 2021/22	1.1 A programme of regular reporting will be agreed with NYCC T&C and documented in the Service Level Agreement. This will provide assurance that standards continue to be met and accreditation continues.	31/03/2023	Head of Pensions Administration	Phillippa Cockerill	Delayed,    to be actioned summer 2023
IT Security 2021/22	2.1 Quarterly reports will be requested from NYCC T&C from the Boxphish learning platform. These will be reviewed and monitored to ensure that staff complete training	31/03/2023	Head of Pensions Administration	Phillippa Cockerill	Delayed, request submitted to IT 26/06/2023
Expenditure 2021/22	1. Amend bank account change process to include acknowledgement back to the pensioner of the change by letter, where the portal hasn’t been used to make the bank account change.	31/03/2023	Head of Pensions Administration	Phillippa Cockerill	Completed