Case Studies

Health Education England

Raising the Bar: How CoreStream GRC Revolutionized Information Asset Management for Health Education England

 About NHS Health Education England

Health Education England (HEE) is the workforce training and education directorate of NHS England. Its mission is to provide national leadership and coordination for the education and training of the health and public health workforce across England. HEE plays a pivotal role in ensuring that healthcare professionals are well-equipped with the skills and knowledge needed to meet the evolving needs of the NHS. With a focus on enhancing workforce capacity, capability, and quality of care, HEE is dedicated to shaping a workforce that is fit for the future.

Number of Employees: 3,200+
Industry: Healthcare
Assets: 700+

Challenge

Navigating complex Information Governance needs across multiple teams and locations

Health Education England (HEE) faced a significant challenge in managing its Information Governance Toolkit (IGT) across its diverse operations. With over 700+ assets spread across various teams and locations, HEE required a robust technology solution that would allow them to:

• Identify and manage information assets and flows.
• Perform detailed risk assessments and implement necessary mitigating actions.
• Automate the complete lifecycle of each asset, from identification through to decommissioning.

Given the scale and complexity of the task, HEE needed a tool that could streamline these processes, enhance compliance, and improve operational efficiency.

Solution

A tailored approach with CoreStream GRC’s Information Asset Management

To address these needs, HEE turned to CoreStream GRC for a customized solution that could seamlessly meet their Information Governance Toolkit requirements. CoreStream’s Information Asset Management was configured to document information assets and flows, but it also needed to incorporate a critical feature: the ability to perform risk assessments for each asset. This was achieved by developing a customized risk assessment form within the CoreStream GRC platform.

HEE adopted a phased approach for implementation:

• Phase 1: Proof of Concept – A 3-week phase to validate the system’s capabilities through configuration alone, ensuring that CoreStream GRC could meet the specific needs of HEE’s IGT.
• Phase 2: Go-Live & Change Requests – Following testing and user feedback, HEE moved to the go-live phase, where any necessary adjustments were made, and existing assets were imported into the system.

CoreStream GRC was chosen for its proven expertise in delivering fast, tailored GRC solutions and for its ability to rapidly configure a system without the need for development coding. This allowed HEE to begin using the system almost immediately and make iterative improvements based on real-world testing.

Information Asset Management 

Outcome

True insight and oversight of their information assets with CoreStream GRC

The implementation of CoreStream GRC Information Asset Management was completed in just 8 weeks. The phased rollout ensured a smooth transition, with the following key milestones:

• Proof of Concept (3 weeks)
• HEE Testing, Sign-Off, and Change Request Prioritization (3 weeks)
• Go-Live Change Requests (2 weeks)

As a result, HEE can now manage the entire lifecycle of their information assets, from creation to decommissioning. CoreStream GRC’s system automatically calculates the risk levels of each asset and associated information flows, allowing for targeted intervention when necessary. Additionally, CoreStream GRC’s reporting functionality provides valuable management insights, enabling HEE to monitor and improve compliance and performance across the organization.

The system now manages over 700 assets, with more than 350 administrative users actively engaging with the platform. The intuitive and user-friendly design of CoreStream GRC’s Information Asset Management has made it easy for staff to adopt, while the efficient support by CoreStream GRC means the NHS team feel full supported every step of the way.

CoreStream GRC’s commitment to Health Education England

At CoreStream GRC, we are proud to be working with Health Education England to help streamline their information governance processes. We understand the complexity of managing a large and diverse portfolio of information assets, and we are thrilled that our Information Asset Manager has played such a vital role in simplifying HEE’s workflow. Our focus on delivering tailored, fast, and user-friendly solutions has allowed HEE to enhance compliance, reduce risk, and improve operational efficiency. We look forward to continuing to support them in their ongoing journey toward optimized information governance.

“CoreStream GRC is committed to providing innovative and customizable solutions that meet the specific needs of our clients. Working with Health Education England has been an exciting opportunity to demonstrate how our platform can empower organizations to manage their information assets efficiently and securely.”
— Sophie Lis, Director of Compliance and Data Governance, CoreStream GRC

About CoreStream GRC: the flexible, no-code solution for GRC success

CoreStream GRC is a dynamic, flexible platform that revolutionizes governance, risk, and compliance (GRC) management. Built to be scalable and intuitive, CoreStream GRC empowers organizations to design and implement their ideal GRC solution with ease, supported by a team of experts. With a user-friendly, no-code interface and customizable features, CoreStream GRC is the perfect tool for businesses that need efficiency and flexibility without the complexities of traditional software.

CoreStream GRC’s platform is trusted by global organizations such as the BBC, Deloitte, NHS, PwC Middle East, and Shell Energy, delivering real, measurable value to help companies manage their risks and compliance requirements.

Want to see the GRC platform in action? Request a demo here, or speak to our team here.

View all clients