Get Started: Assessments, Incidents and Risks

This page covers two Get started topics for privacy officers. Privacy impact assessments is for people who start or edit assessments. Incidents, complaints and risks is for people who manage those registers.

Privacy impact assessments

Start an assessment from the screener

1. On the Assessments tab, open the create dialog.
2. Pick the assessment type and a template, and name the assessment.
3. Choose the subject, or type a new name to create one.
4. If the template has a preliminary screener, click Continue to screener and answer every question. The answers decide whether a full questionnaire is needed.

Answer a section of the questionnaire

Open the assessment and go to the Sections tab. Pick a section in the left rail and answer its questions. Answers are saved as you work.

Draw the data-flow diagram

A Diagram question opens a canvas. Click or drag a shape from the palette (process, data store, person, external party, decision, note), then drag from a shape's port to another shape to draw a connector. Double-click a shape to rename it. If the subject already has a current diagram, your question starts with a copy of it.

Add a risk and a recommendation

On the Risks tab, add a risk with its likelihood, impact and mitigation. To record a recommendation, use the Commitments card on the Overview tab: a proposed commitment is a recommendation, and you Accept it with an owner and a due date, or Decline it with reasons.

Send the assessment for review

Open the Review tab and click Start review. Choose the review template, then Assign approver on each step. Starting a review moves the assessment to In Review.

Practise on a training assessment

Select Practise to open a fictional assessment in train mode.

Incidents, complaints and risks

Open a privacy register

Select Incidents, Complaints or Risks in the top navigation. The step ticks when you open one.

Log an incident

1. On the Incidents dashboard, choose Report incident.
2. Pick the Incident type and enter a Title.
3. Set Discovered on (it cannot be in the future).
4. Optionally add a cause, a privacy subject, the number of affected individuals and the categories of personal information.
5. Select Report incident. The incident opens in its detail panel, and every field can be edited later.

Register a complaint

On the Complaints dashboard, choose Register complaint. Select the Complaint type and Intake origin, enter a Title, add the parties and dates, and optionally link a request. Click Register complaint (or Register appeal).

Add a risk to the register

On the Risks tab, click New risk (you need the permission to manage risks). Choose a source, such as an organizational risk or a system, and rate it. The heat map and cards update as you add risks.

Practise on a training incident, complaint or risk

Select Practise to work on a fictional case.

Take part in a team exercise

A training lead plans team exercises. Select the step to see what is running and join one. See Team Exercises.

Guide me, Practise and Mark complete

Each step in the Get started group on My Day has one main action and two icons.

• Guide me (the training icon) highlights the real control on the real screen in at most four short steps. The control stays usable, Tab reaches it, and Escape closes the tour. Guide me never opens a case for you. See Guide me.
• Practise appears on steps that have a training case. It opens train mode, where you work on fictional cases and nothing is sent, delivered or published. See Train mode.
• ? opens this page. Mark complete ticks the step when you have already done it another way.

A step ticks itself when you do it for real. Practising in train mode ticks only the Practise steps. For the whole group, see Get Started.

Related Pages

• Get Started — the topics on My Day, Guide me and tips.
• Train Mode — practise on fictional cases.
• Creating Assessments — the create dialog and screener.
• Assessment Details — tabs of an open assessment.
• Creating Incidents — the Report incident dialog.
• Creating Complaints — registering a complaint or appeal.
• Risks Dashboard — the risk register.
• Commitments — recommendations and commitments.