Information Management Assessment programme

Our Information Management Assessment (IMA) programme provides public sector bodies with an independent assessment of how well they are managing their information and mitigating related risks.

The IMA promotes a self-assessment first approach, and provides the following tools and resources:

The Section 46 Code Maturity Assessment Tool

The Code of Practice on the Management of Records, issued under Section 46 of the Freedom of Information Act 2000, provides guidance to public authorities on the creation, management, retention, and disposal of records.

Revised and updated by The National Archives, the Code reflects contemporary information management practices and the realities of a modern digital working environment. It is a technical document designed to support information management professionals in discharging their duties under the Freedom of Information legislation.

Authorities are expected to regularly assess their policies and procedures against the Code’s requirements and update them as needed. Risks associated with non-compliance should be incorporated into the authority’s broader risk management framework.

To support this, The National Archives offers the Section 46 Maturity Assessment Tool as part of its Information Management Assessment (IMA) toolkit. Designed specifically for public sector bodies, the tool helps assess the strengths and weaknesses of their information and records management practices, set improvement goals, and track progress over time.

Access and learn more about the Section 46 Code Maturity Assessment tool:

If you are a public sector body and are interested in conducting a S46 Code Maturity assessment, please get in touch at information.management.assessment@nationalarchives.gov.uk.

Digital Appraisal, Selection and Sensitivity Review Maturity Assessment Tool

Distinguishing between records worthy of permanent preservation and those without further value is a significant challenge, especially when it comes to the vast amounts of digital records created by public bodies. It is widely accepted that the appraisal, selection, and sensitivity review of digital records will only be feasible with machine assistance.

Building the capability of digital appraisal and sensitivity review (ASSR) for legacy and current records requires investment in skills, infrastructure, and cross-departmental collaboration.

In consultation with the GKIM community, The National Archives has developed the Digital ASSR Maturity Assessment Tool. The aim of the Tool is to provide a tool to help public bodies measure the maturity of their capabilities for digital ASSR and to provide targeted next steps for improvement.

The Tool uses a 5-point maturity scale: 1. Beginner, 2. Emerging, 3. Learning, 4. Developing, and 5. Mastering. These levels are applied across seven key areas: Governance, Skills, Methodology, Technical Capabilities, Capacity, Engagement, and Transparency & Accountability.

Access and learn more about the Digital ASSR Maturity Assessment Tool:

If you are a public sector body and are interested in conducting a Digital ASSR assessment, please get in touch at information.management.assessment@nationalarchives.gov.uk.

M365 Maturity Self-Assessment Tool

The M365 Maturity Self-Assessment Tool Framework was originally developed by The National Archives, with maturity levels benchmarked in consultation with the Government Knowledge Information Management M365 User Group. The tool was primarily designed for organisations subject to the UK Public Record Act to self-assess the effectiveness of their approach to information and records management in their M365 tenants.

Recognising the need to ensure that the Tool continues to be developed and maintained, The National Archives approached the Information and Records Management Society (IRMS) to provide ongoing oversight of the Tool. To support this process, IRMS has established an international working group and ran a new benchmarking exercise in 2024-25.

IRMS established a working group of The National Archives and international public sector records management specialists, which determines when new features/capabilities require the Tool to be updated and runs benchmarking exercises to ensure that the definition of best practices continues to reflect current consensus. The benchmarking exercises provide the Tool with a collective legitimacy based on what multiple Information Governance experts considered to be best practice.

Access and learn more about the M365 Maturity Self-Assessment Tool:

If you are a public sector body and are interested in conducting a M365 Maturity assessment, please get in touch at information.management.assessment@nationalarchives.gov.uk.

Data Use

Data collected during the Information Management Assessment Programme will be used by The National Archives to help support public sector bodies improve GKIM practices and compliance. Anonymised data may be used to analyse the information management landscape across government and to improve our guidance and engagement offer. Anonymised data may also be used to help identify evidence of best practices at well achieving bodies to be promoted through the programme.

As set out in The National Archives’ Memorandum of Understanding (MoU) with the Information Commissioner’s Office (ICO), The Keeper may be consulted by the Information Commissioner where the latter is considering issuing a Practice Recommendation to an authority that is subject to the Public Records Act 1958. Data collected as part of the self-assessment may inform the view of the Keeper in these circumstances and he may share data collected through the self-assessment as part of his feedback.

Working with government to raise standards in information management.

The Code of Practice on the Management of Records, issued under Section 46 of the Freedom of Information Act 2000, provides guidance to public authorities on the creation, management, retention, and disposal of records.

Distinguishing between records worthy of permanent preservation and those without further value is a significant challenge, especially when it comes to the vast amounts of digital records created by public bodies.