How to check the information value
Use your answers to questions 1 to 27 to help with your risk assessment of using a public cloud service.
Information value informs your risk assessment
Answering questions 1 to 27 helps you:
- know if you need to discover the risks — questions 28 to 105
- do your risk assessment by making you aware of how important the information is to your organisation, the NZ government and New Zealanders.
Assess the risks of using a public cloud service
Number of questions — information value
There are 27 questions that make up this part of the risk assessment tool for public cloud services.
Always consider any additional areas that are specific to your business and technical contexts.
Complete the following steps
The questions in each step match those in the Excel version of the risk assessment tool for public cloud services.
Excel version — risk assessment tool for public cloud services
-
1
Business and technical contexts — questions 1 and 2
For the information, identify the business owner so you can work out the business and technical contexts.
-
2
Classify — questions 3 to 9
Classifying information is essential to assessing its risks accurately.
-
3
Criticality — questions 10 to 13
Understand the impact of risks on your organisation, the NZ government and New Zealanders.
-
4
Data sovereignty — questions 14 to 22
Assess how secure the information will be in the public cloud service you’re considering.
-
5
Privacy — questions 23 to 27
If your data has personal information, you’ll need to complete a privacy impact assessment.
-
6
Tips for right-sizing your risk assessment
Match your time and effort on risk assessments to the information’s risk and value.
-
7
Decide if you need a risk discovery
See if the risk of incomplete information is acceptable or if you need to discover the risks by answering questions 28 to 105.
Decide if you need a risk discovery before using a public cloud service
Utility links and page information
Last updated
