Information Management Assessment programme

Our Information Management Assessment (IMA) programme provides public sector bodies with an independent assessment of how well they are managing their information and mitigating related risks.

The IMA promotes a self-assessment first approach, and provides the following tools and resources:

The Section 46 Code Maturity Assessment Tool

The Code of Practice on the Management of Records, issued under Section 46 of the Freedom of Information Act 2000, provides guidance to public authorities on the creation, management, retention, and disposal of records.

Revised and updated by The National Archives, the Code reflects contemporary information management practices and the realities of a modern digital working environment. It is a technical document designed to support information management professionals in discharging their duties under the Freedom of Information legislation.

Authorities are expected to regularly assess their policies and procedures against the Code’s requirements and update them as needed. Risks associated with non-compliance should be incorporated into the authority’s broader risk management framework.

To support this, The National Archives offers the Section 46 Maturity Assessment Tool as part of its Information Management Assessment (IMA) toolkit. Designed specifically for public sector bodies, the tool helps assess the strengths and weaknesses of their information and records management practices, set improvement goals, and track progress over time.

Access and learn more about the Section 46 Code Maturity Assessment tool:

If you are a public sector body and are interested in conducting a S46 Code Maturity assessment, please get in touch at information.management.assessment@nationalarchives.gov.uk.

Digital Appraisal, Selection and Sensitivity Review Maturity Assessment Tool

Distinguishing between records worthy of permanent preservation and those without further value is a significant challenge, especially when it comes to the vast amounts of digital records created by public bodies. It is widely accepted that the appraisal, selection, and sensitivity review of digital records will only be feasible with machine assistance.

Building the capability of digital appraisal and sensitivity review (ASSR) for legacy and current records requires investment in skills, infrastructure, and cross-departmental collaboration.

In consultation with the GKIM community, The National Archives has developed the Digital ASSR Maturity Assessment Tool. The aim of the Tool is to provide a tool to help public bodies measure the maturity of their capabilities for digital ASSR and to provide targeted next steps for improvement.

The Tool uses a 5-point maturity scale: 1. Beginner, 2. Emerging, 3. Learning, 4. Developing, and 5. Mastering. These levels are applied across seven key areas: Governance, Skills, Methodology, Technical Capabilities, Capacity, Engagement, and Transparency & Accountability.

Access and learn more about the Digital ASSR Maturity Assessment Tool:

If you are a public sector body and are interested in conducting a Digital ASSR assessment, please get in touch at information.management.assessment@nationalarchives.gov.uk.

M365 Maturity Self-Assessment Tool

As part of its Information Management Assessment offering, The National Archives has developed the M365 KIM Maturity Assessment Tool to help organisations subject to the Public Records Act evaluate the effectiveness of their information and records management practices within M365 environments.

The tool is based on the M365 Information Governance Maturity Model, maintained by the Information and Records Management Society (IRMS) through an international working group of national archives and records management specialists. This group provides oversight by continuously reviewing emerging M365 features, determining when updates are required, and conducting benchmarking exercises with the wider records management community. This ensures that best practice definitions reflect current consensus. These benchmarking exercises give the tool collective legitimacy, grounded in what multiple Information Governance experts consider best practice.

These benchmarking exercises give the tool collective legitimacy, grounded in what multiple Information Governance experts consider best practice.

This version of the Assessment Tool represents the second iteration, built on the latest update of the M365 Information Governance Maturity Model. In addition to updated content, the tool now offers enhanced interactive functionality, including improved data visualisation and action planning features.

Access and learn more about the Digital ASSR Maturity Assessment Tool:

Data Use

Data collected during the Information Management Assessment Programme will be used by The National Archives to help support public sector bodies improve GKIM practices and compliance. Anonymised data may be used to analyse the information management landscape across government and to improve our guidance and engagement offer. Anonymised data may also be used to help identify evidence of best practices at well achieving bodies to be promoted through the programme.

As set out in The National Archives’ Memorandum of Understanding (MoU) with the Information Commissioner’s Office (ICO), The Keeper may be consulted by the Information Commissioner where the latter is considering issuing a Practice Recommendation to an authority that is subject to the Public Records Act 1958. Data collected as part of the self-assessment may inform the view of the Keeper in these circumstances and he may share data collected through the self-assessment as part of his feedback.

Working with government to raise standards in information management.

The Code of Practice on the Management of Records, issued under Section 46 of the Freedom of Information Act 2000, provides guidance to public authorities on the creation, management, retention, and disposal of records.

Distinguishing between records worthy of permanent preservation and those without further value is a significant challenge, especially when it comes to the vast amounts of digital records created by public bodies.

As part of its Information Management Assessment offering, The National Archives has developed the M365 KIM Maturity Assessment Tool to help organisations subject to the Public Records Act evaluate the effectiveness of their information and records management practices within M365 environments.