Severity Consequence Consequence Insignificant Moderate Major Severe rating Risk to any party’s No risk No risk No risk Any risk to Threaten life personal safety personal directly safety Release of No impact Would Measurable Release of Would have personally or have impact, information severe commercially little breach of have a consequences sensitive data to impact regulations or significant to a person, third parties commitment impact agency or without consent to business confidentiality Financial loss to any No loss Minimal Minor Significant Substantial client of the service provider or third party Financial loss to No loss Minimal Minor Significant Substantial Agency / service < 2% of 2% to < 5% of 5% to < 10% of ≥ provider monthly monthly 10% of monthly agency agency monthly agency budget budget agency budget budget Impact on No impact No Cause Work Substantial government impact financial loss significantly Damage finances or or loss of against economic and earning commercial potential interests Damage to any No damage No Minor: Limited Substantial party’s standing or damage term damage long-term long-term reputation damage damage The second step involves mapping the likelihood of these occurring in order to determine overall risk levels and from there the required assurance level can be determined. NeAF Indicative assurance level requirements based upon likelihood and consequences Consequences Likelihood Insignificant Minor Moderate Major Severe Almost certain Nil Low Moderate High High Likely Nil Low Moderate High High Possible Nil Minimal Low Moderate High Unlikely Nil Minimal Low Moderate Moderate Rare Nil Minimal Low Moderate Moderate
Consequence Severity Consequence rating Insignificant Moderate Major Severe Risk to any party’s personal safety No risk No risk No risk Any risk to personal safety Threaten life directly Release of personally or commercially sensitive data to third parties without consent No impact Would have little impact Measurable impact, breach of regulations or commitment to confidentiality Release of information have a significant impact Would have severe consequences to a person, agency or business Financial loss to any client of the service provider or third party No loss Minimal Minor Significant Substantial Financial loss to Agency / service provider No loss Minimal < 2% of monthly agency budget Minor 2% to < 5% of monthly agency budget Significant 5% to < 10% of monthly agency budget Substantial ≥ 10% of monthly agency budget Impact on government finances or economic and commercial interests No impact No impact Cause financial loss or loss of earning potential Work significantly against Substantial Damage Damage to any party’s standing or reputation No damage No damage Minor: damage Limited long-term damage Substantial long-term damage The second step involves mapping the likelihood of these occurring in order to determine overall risk levels and from there the required assurance level can be determined. NeAF Indicative assurance level requirements based upon likelihood and consequences Consequences Likelihood Insignificant Minor Moderate Major Severe Almost certain Nil Low Moderate High High Likely Nil Low Moderate High High Possible Nil Minimal Low Moderate High Unlikely Nil Minimal Low Moderate Moderate Rare Nil Minimal Low Moderate Moderate term
draft-commercial-service-provider.docx