Integrity Business impact assessment - example – Integrity Impact Low Medium High Risk to Individual Consider any risk of injury or impact Risk to individual Direct actual Direct actual risk to safety on safety, as well as the possibility of safety risk to individual life / lives loss of life. This could be due to a individual semantic attack which causes a safety SCADA system to misfunction Data Quality Effect on agency data quality Record keeping Loss of Significant failure requirements does not meet historically of Evidentiary Public Record Act important requirements (QLD (2002 QLD) records Evidence Act requirements 1977), Chain of Custody Distress caused Information gathered about a party A party is Multiple Direct, tangible to any party that is incorrect. Inability to correct concerned that parties are and significant inaccuracies effectively. Information is information concerned or distress caused aged and therefore less accurate. gathered is issues incorrect Personally Does information held about clients Quality of Low quality of Inaccuracies in sensitive data have appropriate integrity/quality. personal holdings personal integrity failure Examples include medical records and information held affects information have other personal information. Inability to is not fit for customers significant & correct inaccurate information in a purpose adversely tangible effects on timely manner over days multiple customers Impact on Impact on Government finances or Low - Moderate Severe impact Catastrophic Government economic and commercial interests. impact on a single impact on multiple finances or Fraud through the changing of agency agencies economic and government financial data is an integrity threat
Integrity – Business impact assessment - example Integrity Impact Low Medium High Risk to Individual safety Consider any risk of injury or impact on safety, as well as the possibility of loss of life. This could be due to a semantic attack which causes a SCADA system to misfunction Risk to individual safety Direct actual risk to individual safety Direct actual risk to individual life / lives Data Quality Effect on agency data quality requirements Record keeping does not meet Public Record Act (2002 QLD) requirements Loss of historically important records Significant failure of Evidentiary requirements (QLD Evidence Act 1977), Chain of Custody Distress caused to any party Information gathered about a party that is incorrect. Inability to correct inaccuracies effectively. Information is aged and therefore less accurate. A party is concerned that information gathered is incorrect Multiple parties are concerned or issues Direct, tangible and significant distress caused Personally sensitive data integrity failure Does information held about clients have appropriate integrity/quality. Examples include medical records and other personal information. Inability to correct inaccurate information in a timely manner Quality of personal information held is not fit for purpose Low quality of holdings affects customers adversely over days Inaccuracies in personal information have significant & tangible effects on multiple customers Impact on Government finances or economic and Impact on Government finances or economic and commercial interests. Fraud through the changing of government financial data is an integrity threat Low - Moderate impact Severe impact on a single agency Catastrophic impact on multiple agencies
QGISCF-v4.0.0.docx