Respond to all questions in the appropriate module by providing a 'Yes' or 'No' response. A 'Yes' response means functionality exists. No further action is required. Add a review date and document the assessment outcomes and other relevant information in the system information management plan. A response to each question will mean that this specific functionality is not met. 'No' Module 1 Information is trusted - This module helps determine if you can trust the information in the system. It is based on the records characteristics described – in ISO 15489: Australian and International Standard for Records Management. No Question Considerations Response For responses For 'No' responses ‘Yes’ (Y/N) 2.1.1 Can or will you be able to Consider the risks if you cannot show: Document how you will Document how you plan prove the information or data is who created it prove the information or to address this lack of authentic? when it was created data is authentic. functionality to prove the what metadata you will need to show its authenticity. authenticity of Continue to Question information or data. Archives endorses two metadata standards for 2.1.2 information management in the Australian Government. Continue to Question These are: 2.1.2 the the metadata standard . No Question Considerations Response For responses For 'No' responses ‘Yes’ (Y/N) 2.1.2 Can or will you be able to Consider what security controls are needed for your Document how you will Document how you plan identify or prevent system to detect, counteract or minimize security identify and prevent to identify and prevent unauthorised changes to the risks to information or systems. unauthorised changes to unauthorised changes to information or data? information or data. information or data. Consider the risks if you cannot: access human-readable audit logs showing changes Continue to Question Continue to Question to content 2.1.3 2.1.3 capture all relevant actions in an trail. 2.1.3 When you access information Consider the if: Document how you Document how you will or data, can or will you be able ensure have all make all relevant
Respond to all questions in the appropriate module by providing a 'Yes' or 'No' response. A 'Yes' response means functionality exists. No further action is required. Add a review date and document the assessment outcomes and other relevant information in the system information management plan. A 'No' response to each question will mean that this specific functionality is not met. Module 1 – Information is trusted - This module helps determine if you can trust the information in the system. It is based on the records characteristics described in ISO 15489: Australian and International Standard for Records Management. No Question Considerations Response (Y/N) For ‘Yes’ responses For 'No' responses 2.1.1 Can or will you be able to prove the information or data is authentic? Consider the risks if you cannot show: who created it when it was created what metadata you will need to show its authenticity. Archives endorses two metadata standards for information management in the Australian Government. These are: the the metadata standard . Document how you will prove the information or data is authentic. Continue to Question 2.1.2 Document how you plan to address this lack of functionality to prove the authenticity of information or data. Continue to Question 2.1.2 No Question Considerations Response (Y/N) For ‘Yes’ responses For 'No' responses 2.1.2 Can or will you be able to identify or prevent unauthorised changes to the information or data? Consider what security controls are needed for your system to detect, counteract or minimize security risks to information or systems. Consider the risks if you cannot: access human-readable audit logs showing changes to content capture all relevant actions in an trail. Document how you will identify and prevent unauthorised changes to information or data. Continue to Question 2.1.3 Document how you plan to identify and prevent unauthorised changes to information or data. Continue to Question 2.1.3 2.1.3 When you access information or data, can or will you be able Consider the if: Document how you ensure have all Document how you will make all relevant