Please note: This sample shows only part of the complete Privacy Impact Assessment tool. PII Asset
Risk Owner
(blank)
(blank)
Risk Level Calculated
Privacy Impact Assessment Workbook To refresh chart data, click on “Refresh All” on the Data ribbon. RISK DESCRIPTION Ref PII Asset Risk Scenario Risk Owner
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20
PRE-TREATMENT Existing Likelihood Likelihood Controls Rationale
Impact Impact Rationale
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Select…
Risk Score
Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated
Risk Level
Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated
TREATMENT Treatment Treatment Option Action(s) Chosen Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select…
POST-TREATMENT Post-Treatment Post-Treatment Post-Treatment Post-Treatment Post-Treatment Post-Treatment Comments Likelihood Likelihood Impact Impact Risk Score Risk Level Rationale Rationale Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select…
Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select… Select…
Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated
Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated Calculated
Likelihood The following table should be used to decide upon the most appropriate likelihood for a particular risk. LIKELIHOOD DESCRIPTION 1 2 3 4 5
Improbable Unlikely Likely Very Likely Almost certain
SUMMARY Has never happened before and there is no reason to think it is any more likely now There is a possibility that it could happen, but it probably won't On balance, the risk is more likely to happen than not It would be a surprise if the risk did not occur either based on past frequency or current circumstances Either already happens regularly or there is some reason to believe it is virtually imminent
Impact The following table should be used as guidance to help to decide upon the correct impact rating for a particular risk. IMPACT LEVEL
IMPACT AREAS
Rating Description Financial
Health and Safety
Impact on Reputation
Legal Impact
Other Potential Impacts
1 2 3
Negligible Slight Moderate
No loss Less than £10 Up to £100
No harm No impact Minor harm Slight embarrassment Significant, but non life- Local embarrassment threatening injuries
No impact [Specify impact] Minor breach of law [Specify impact] Significant illegality without [Specify impact] prison or major fines
4
High
Up to £10,000
Serious injury
Severe, but temporary damage to reputation
5
Very High
More than £10,000
Potential for death
Reputation is ruined permanently
Potential major prosecution [Specify impact] with threat to liberty and high fine May lead to lengthy prison [Specify impact] term or very large fines