Ref. no. Responding to Description of Rationale and Existing controls Assessment of Recommended Residual risk remaining people’s the risk consequences that contribute to residual (current) risk additional actions despite new safeguards requests for identified for the agency manage recognising current to reduce or information or individual identified measures mitigate risk about themselves, or requests to correct information about themselves Principle 8: Accuracy etc. of personal information to be checked before use Ref. no. What steps do Description of Rationale and Existing controls Assessment of Recommended Residual risk remaining you take to the risk consequences for that contribute to residual (current) risk additional actions despite new safeguards check the identified the agency or manage risks recognising current to reduce or accuracy, individual identified measures mitigate risk relevance etc of personal information before you use it? Principle 9: Agency not to keep personal information for longer than necessary
Ref. no. Responding to people’s requests for information about themselves, or requests to correct information about themselves Description of the risk identified Rationale and consequences for the agency or individual Existing controls that contribute to manage identified Assessment of residual (current) risk recognising current measures Recommended additional actions to reduce or mitigate risk Residual risk remaining despite new safeguards Principle 8: Accuracy etc. of personal information to be checked before use Ref. no. What steps do you take to check the accuracy, relevance etc of personal information before you use it? Description of the risk identified Rationale and consequences for the agency or individual Existing controls that contribute to manage risks identified Assessment of residual (current) risk recognising current measures Recommended additional actions to reduce or mitigate risk Residual risk remaining despite new safeguards Principle 9: Agency not to keep personal information for longer than necessary
Template-3-Risk-and-Mitigation-Table-Part-2-Appendix-B.docx