Information value for public cloud services
Questions 1 to 27 of the risk assessment tool — for the information you’re looking to use with a public cloud service, find out how important it is to your organisation, the NZ government and New Zealanders.
How to check the information value
Use your answers to questions 1 to 27 to help with your risk assessment of using a public cloud service.
Business and technical contexts of the information
Questions 1 and 2 — identify the business owner of the information to work out the business context and find the stakeholders for the information’s technical context.
Questions 3 to 9 — classify the information accurately, so you can properly assess its value and risks.
Criticality of the information
Questions 10 to 13 — understand how important the information is to your organisation, the NZ government and New Zealanders.
Sovereignty over the information
Questions 14 to 22 — assess if it’s appropriate for data to be stored and processed outside of Aotearoa New Zealand.
Privacy of the information
Questions 23 to 27 — complete a privacy impact assessment if your data has personal information.
Tips for right-sizing your risk assessment
Match your time and effort on risk assessments to the information’s risk and value — here’s why and how.
Decide if you need a risk discovery before using a public cloud service
Make sure the time and effort spent on assessing risks are in proportion to the information’s risk and value to your organisation, the NZ government and New Zealanders.