Body of Knowledge · Control · D4
Operational control
Who runs it and holds admin access?
56 out of 100 · Partly sovereign
Average of 411 scored findings; 0 findings carry no evidence on this dimension and are not counted.
1. By sector
- Schools 67
- Defence 64
- NHS 61
- BBC 61
- Policing 57
- Local Government 55
- Central Government 53
- Higher Education 52
- Devolved Governments 43
2. How findings split
- Exposed 2
- Dependent 195
- Partly sovereign 144
- Sovereign 70
How we score it
Each finding is scored 0 (exposed) to 3 (sovereign) from the evidence field below; the page index is the average, scaled to 100.
- operator admin location
- UK cleared 3
- Customer (in-house UK team) 3
- UK 2
- Vendor-global 1
- Offshore 0
3. Most exposed
- Business process outsourcing: finance, P2P, payroll (UK/intl) and SAP application management 0 BBC · BBC Public Service · Tata Consultancy Services (subcontractors EY payroll, Canon document mgmt) (Find a Tender Service, 2023)
- Atlassian user-support tooling for ScotAccount 0 Devolved Governments · Scottish Government (Digital Identity Scotland) · Atlassian (Mygov, 2026)
- AWS – national services (Spine 36 services, NHS login, e-RS, 111 DoS, MESH) 33 NHS · NHS – National · Amazon Web Services (NHS England Digital, 2023)
- Microsoft Azure – NHSmail shared tenant, Copilot, NHSE analytics; ICB/trust Azure subscriptions 33 NHS · NHS – National · Microsoft (Find a Tender Service, 2025; Microsoft, n.d.)
- NHS App on iOS and Android 33 NHS · NHS – National · Apple; Google (Digital Health, 2025)
4. Most sovereign
- SQL Server 2019, Power BI and SSRS for BI and data warehousing 100 Devolved Governments · Powys Teaching Health Board (NHS Wales) · Microsoft (Pthb, 2023)
- Welsh Nursing Care Record (single national instance since Nov 2023) 100 Devolved Governments · NHS Wales (DHCW) · Digital Health and Care Wales (UKAuthority, 2024)
- Welsh PAS (WPAS) incl. maternity and theatre modules 100 Devolved Governments · NHS Wales (DHCW) · Digital Health and Care Wales (Pthb, 2023)
- Welsh Clinical Portal (national clinical record viewer) 100 Devolved Governments · NHS Wales (DHCW) · Digital Health and Care Wales (Pthb, 2023)
- ScotAccount citizen sign-in and identity verification (OIDC, 2FA) 100 Devolved Governments · Scottish Government (Digital Identity Scotland) · Scottish Government (built with Scott Logic); hosted on AWS (Mygov, 2026)
Also in Control