Skip to main content

Case Studies & Evidence

Evidence for consequential decisions

Explore how IG-Smart helps organisations improve governance, privacy, cyber assurance and decision-making in regulated and high-consequence environments.

Explore the Evidence Search Evidence Request Relevant Evidence

  • Named & anonymised evidence

    Real engagements with confidentiality protected

  • Client validation

    Published evidence and testimonials

  • Decision-ready outputs

    Practical, accountable and board-ready

  • Regulated & high-consequence environments

    Experience across complex regulated sectors

Evidence library

Matching case studies

4 matching case studies · 33 total

  • NHS, Health & HealthTech, Named client

    Department of Health and Social Care

    Governance leadership for the NHS COVID-19 contact tracing application

    Evidence available:

    • Engagement scope stated
    • Deliverables described

    What IG-Smart did · Information Governance

    Legal and Information Governance workstream leadership and Probity Cell programme management for the development of the NHS COVID-19 contact tracing application.

    What this demonstrates

    Relevant to organisations in high-consequence environments that need governance practitioners able to work inside complex programmes and keep decisions defensible while delivery continues.

    Delivery:BuildManageAssure

    Read the full case study: Department of Health and Social Care

  • NHS, Health & HealthTech, Named client

    NHS England

    National data-privacy and information-governance advisory for NHS England

    Evidence available:

    • Engagement scope stated
    • Deliverables described

    What IG-Smart did · Information Governance

    IG-Smart advised NHS England's Chief Data Officer and Head of Information Governance on data privacy and data sharing, including development of a national privacy-by-design framework and IG programmes for New Models of Care and the Prime Minister's GP Challenge Fund.

    What this demonstrates

    Relevant to public bodies and other regulated organisations that need senior information-governance leadership across complex, multi-stakeholder programmes where privacy-by-design, data sharing and governance review need to operate consistently.

    Delivery:BuildManageAssure

    Read the full case study: NHS England

  • NHS, Health & HealthTech, Named client

    South West London Better Care Fund

    An information-governance framework for integrated health and social care across South West London

    Evidence available:

    • Engagement scope stated
    • Deliverables described

    What IG-Smart did · Information Governance

    IG-Smart led the information-governance programme for the South West London Better Care Fund, developing the legal and technical framework for health and social care professionals to share records across organisational and borough boundaries.

    What this demonstrates

    Relevant to health and public-sector programmes that need a common information-governance framework to support lawful data sharing across multiple organisations with differing operational requirements.

    Read the full case study: South West London Better Care Fund

  • Public Sector, Named client

    Crown Office & Procurator Fiscal Service

    Certified Data Protection Officer training for Scotland's prosecution service

    Evidence available:

    • Named executive testimonial
    • Engagement scope stated
    • Deliverables described

    What IG-Smart did · Data Privacy & DPO

    IG-Smart delivered a comprehensive Certified Data Protection Officer training course to the Crown Office & Procurator Fiscal Service's Departmental Security Officers and Learning & Development team, so they could fulfil the role of Data Protection Officer and cascade key messages to all employees.

    What this demonstrates

    Relevant to justice, policing, government and other public bodies building in-house DPO and data-protection capability.

    “From limited knowledge of the expectations of GDPR the Certified Data Protection Officer course delivered by IG Smart took me with ease to a greater level of understanding and confidence.”
    Michael Feighan, Departmental Security Officer, Crown Office & Procurator Fiscal Service

    Delivery:AssessBuildImprove

    Read the full case study: Crown Office & Procurator Fiscal Service

Client voices

Client voices behind the evidence

IG Smart have provided us with quality subject matter experts surrounding GDPR and Privacy risk-based analysis and remediation; supplying qualified senior information security and experienced DPO and specialists.

Dan WestGlobal CIO, AIMIA ILS

Integrated privacy and information-security expertise

View the evidence — AIMIA ILS case study

What the evidence helps clients decide

Decision-ready outputs

The outlines show how IG-Smart structures typical outputs. They are not client documents.

  • Prioritise remediation

    Independent audit report · Supplier, IG or security audit

    An independent view of how controls operate in practice, with rated findings and recommendations.

    Used by:
    Risk, compliance and procurement leads; supplier owners
    Supports:
    Supplier assurance, remediation and contract decisions
    View typical structure

    Representative IG-Smart structure — client information not shown

    1. 01Scope and method
    2. 02Findings by control area
    3. 03Risk rating and rationale
    4. 04Prioritised recommendations
    5. 05Residual risk and owner

  • Plan and evidence improvement

    Prioritised improvement plan · Readiness for DSPT, ISO/IEC 27001 or audit

    A sequenced plan that turns gaps into owned, evidenced actions.

    Used by:
    Programme owners, SIROs, IG and security leads
    Supports:
    Resourcing, sequencing and readiness decisions
    View typical structure

    Representative IG-Smart structure — client information not shown

    1. 01Current-state gaps
    2. 02Priority and dependency
    3. 03Owner and timescale
    4. 04Evidence required
    5. 05Progress tracking

  • Maintain accountability

    Retained DPO advisory record · Outsourced or fractional DPO service

    A running record of matters raised, advice given and the decisions taken.

    Used by:
    Legal, compliance and data-protection leads
    Supports:
    Accountability, consistent advice and regulator-ready records
    View typical structure

    Representative IG-Smart structure — client information not shown

    1. 01Matter raised
    2. 02Applicable requirement
    3. 03Advice and options
    4. 04Decision owner
    5. 05Follow-up

  • Understand residual risk

    Board assurance summary · Board, committee or executive reporting

    An executive-level view of material findings, residual risk and decisions requiring accountable-owner attention.

    Used by:
    Boards, Audit Committees, accountable executives
    Supports:
    Risk acceptance, remediation prioritisation and assurance decisions
    View typical structure

    Representative IG-Smart structure — client information not shown

    1. 01Assurance question
    2. 02Evidence reviewed
    3. 03Assurance opinion basis
    4. 04Exceptions and risk acceptance
    5. 05Decisions requested

Differentiation

Why organisations appoint IG-Smart

Each reason links to published cases that show it in practice.

  1. Senior practitioner-led

    Engagements are led by experienced practitioners with direct involvement in substantive advisory and assurance work, supported proportionately where appropriate.

    Evidenced by

  2. Independent challenge

    Advice and assurance driven by evidence, requirements and risk rather than incentives to sell a technology platform.

    Evidenced by

  3. Practical, decision-ready outputs

    Work designed to support accountable owners, procurement teams, executives and boards.

    Evidenced by

  4. Experience in regulated and high-consequence environments

    Evidence supported through the published portfolio.

    Evidenced by

  5. Retained capability where continuity matters

    Evidence from managed and long-term client relationships.

    Evidenced by

Confidentiality & controlled disclosure

Evidence without compromising client confidentiality

Some of IG-Smart's most sensitive engagements involve regulatory, operational, security, commercial or patient-safety information that cannot responsibly be published in full. Where necessary, examples are anonymised or withheld from public listing.

Additional evidence may sometimes be available, subject to:

  • Confidentiality
  • Client permissions
  • Appropriateness for the buyer
  • Procurement stage
  • IG-Smart approval

Need evidence relevant to your requirement?

Tell us the sector, service or procurement requirement you are assessing.

Talk to a Senior PractitionerRequest Relevant EvidenceSubmit an RFP or Tender