Risk Assessment

A formal risk assessment of information transfer practices is undertaken to ensure any risks of information being transferred out of or into the organisation from third parties are identified and dealt with appropriately and in accordance with the organisation’s risk management strategy