Elements and Performance Criteria
- Initiate review process
- Negotiate with stakeholders to determine scope of review and terms of reference.
- Formalise reporting arrangements and review timeframes with stakeholders.
- Develop communication plan in accordance with information security principles.
- Select review methods and processes in line with expectations and terms of reference.
- Identify resources required to complete the review.
- Document review through consultation with stakeholders.
- Conduct reviews
- Secure resources and information required to complete review.
- Assess information in accordance with the terms of reference.
- Implement communication strategies in line with communications plan.
- Establish information management process to document review activities and rationale for findings.
- Assess review critically at regular intervals to ensure objectives are achievable within resource and legal constraints, and in line with terms of reference.
- Identify urgent matters arising from the review that require immediate action.
- Implement strategies to ensure confidentiality is maintained throughout the review.
- Negotiate with stakeholders to adjust terms of reference.
- Formalise review findings
- Assess and document review findings and recommendations to complete review process.
- Identify further actions and recommendations generated by review findings.
- Communicate review findings, recommendations and further actions to stakeholders.
- Assess original information to determine archiving, retention and retrieval requirements.
- Initiate review process
- Negotiate with stakeholders to determine scope of review and terms of reference.
- Formalise reporting arrangements and review timeframes with stakeholders.
- Develop communication plan in accordance with information security principles.
- Select review methods and processes in line with expectations and terms of reference.
- Identify resources required to complete the review.
- Document review through consultation with stakeholders.
- Conduct reviews
- Secure resources and information required to complete review.
- Assess information in accordance with the terms of reference.
- Implement communication strategies in line with communications plan.
- Establish information management process to document review activities and rationale for findings.
- Assess review critically at regular intervals to ensure objectives are achievable within resource and legal constraints, and in line with terms of reference.
- Identify urgent matters arising from the review that require immediate action.
- Implement strategies to ensure confidentiality is maintained throughout the review.
- Negotiate with stakeholders to adjust terms of reference.
- Formalise review findings
- Assess and document review findings and recommendations to complete review process.
- Identify further actions and recommendations generated by review findings.
- Communicate review findings, recommendations and further actions to stakeholders.
- Assess original information to determine archiving, retention and retrieval requirements.