Principle 4: Manner of collection of personal information Ref. no. How you are Description of Rationale and Existing controls Assessment of Recommended Residual risk remaining collecting the risk consequences for that contribute to residual (current) risk additional actions to despite new safeguards personal identified the agency or manage risks recognising current reduce or mitigate information individual identified measures risk Principle 5: Storage and Security of personal information Ref. no. How you are Description of Rationale and Existing controls Assessment of Recommended Residual risk remaining storing and the risk consequences for that contribute to residual (current) risk additional actions despite new safeguards securing identified the agency or manage risks recognising current to reduce or personal individual identified measures mitigate risk information Principles 6 and 7: Access to and correction of information
Principle 4: Manner of collection of personal information Ref. no. How you are collecting personal information Description of the risk identified Rationale and consequences for the agency or individual Existing controls that contribute to manage risks identified Assessment of residual (current) risk recognising current measures Recommended additional actions to reduce or mitigate risk Residual risk remaining despite new safeguards Principle 5: Storage and Security of personal information Ref. no. How you are storing and securing personal information Description of the risk identified Rationale and consequences for the agency or individual Existing controls that contribute to manage risks identified Assessment of residual (current) risk recognising current measures Recommended additional actions to reduce or mitigate risk Residual risk remaining despite new safeguards Principles 6 and 7: Access to and correction of information
Template-3-Risk-and-Mitigation-Table-Part-2-Appendix-B.docx