Consider whether a combination of solutions is necessary to Continue to work address the risk or gap entirely. through your list of identified risks and gaps that still need addressing. Examples and other considerations for export activities include: Export and maintain the required metadata in an external system (ie spreadsheet, compliant information management system). Export and maintain additional metadata in an external system (ie catalogues, registers, spreadsheets), that captures information and data structures and relationships. Use agreed data exchange formats and structures to allow export to other systems. Use Extract Transform Load (ETL) software that can convert data into the necessary formats to facilitate export to external systems. Use learning’ software for automated mapping of data structures to facilitate exporting data to external systems. ‘machine Export the data periodically or as required into a format that allows you to interrogate the data (ie a business intelligence tool, spreadsheet). Maintain relevant data in an external system (e.g. a spreadsheet) and make scheduled checks against the data to determine if information management actions need to be taken. Prior to destruction, export a full manifest of system holdings so that data indexing and searching technologies can be used to scan the system. Solution 4 External (Governance) - managing any risk or gaps by implementing procedures and business For example, if the system cannot prevent unauthorised changes, consider controlling access to the system by using business rules and manual security protocols. Question Considerations Response For response For response ‘Yes’ ‘No’ (Y/N) 3.5 Where you have Can the identified gaps be mitigated through implementing Document which Document why this identified a risk or gap governance processes (e.g. procedures and business rules)? business rules/ approach is not in Phase 2 by procedures need to be recommended or give answering to an Managing any risk or gap by implementing procedures and changed/implemented details of the procedures ‘No’ assessment question, business For example if the system cannot prevent to manage risks and and business rules that is an unauthorised changes, consider controlling access to the address gaps in the are already in place for External (Governance) solution system by using business rules and security protocols. system. the system. appropriate to reduce What are the advantages and disadvantages of this approach?
Consider whether a combination of solutions is necessary to address the risk or gap entirely. Continue to work through your list of identified risks and gaps that still need addressing. Examples and other considerations for export activities include: Export and maintain the required metadata in an external system (ie spreadsheet, compliant information management system). Export and maintain additional metadata in an external system (ie catalogues, registers, spreadsheets), that captures information and data structures and relationships. Use agreed data exchange formats and structures to allow export to other systems. Use Extract Transform Load (ETL) software that can convert data into the necessary formats to facilitate export to external systems. Use ‘machine learning’ software for automated mapping of data structures to facilitate exporting data to external systems. Export the data periodically or as required into a format that allows you to interrogate the data (ie a business intelligence tool, spreadsheet). Maintain relevant data in an external system (e.g. a spreadsheet) and make scheduled checks against the data to determine if information management actions need to be taken. Prior to destruction, export a full manifest of system holdings so that data indexing and searching technologies can be used to scan the system. Solution 4 External (Governance) - managing any risk or gaps by implementing procedures and business For example, if the system cannot prevent unauthorised changes, consider controlling access to the system by using business rules and manual security protocols. Question Considerations Response (Y/N) For ‘Yes’ response For ‘No’ response 3.5 Where you have identified a risk or gap in Phase 2 by answering ‘No’ to an assessment question, is an External (Governance) solution appropriate to reduce Can the identified gaps be mitigated through implementing governance processes (e.g. procedures and business rules)? Managing any risk or gap by implementing procedures and business For example if the system cannot prevent unauthorised changes, consider controlling access to the system by using business rules and security protocols. What are the advantages and disadvantages of this approach? Document which business rules/ procedures need to be changed/implemented to manage risks and address gaps in the system. Document why this approach is not recommended or give details of the procedures and business rules that are already in place for the system.
Business-system-assessment-framework_tcm16-102191.docx