MBIE's security and privacy risk assessment templates & guidance
Will O'Brien made this Official Information request to Ministry of Business, Innovation & Employment
This request has an unknown status. We're waiting for Will O'Brien to read recent responses and update the status.
From: Will O'Brien
Dear Ministry of Business, Innovation & Employment,
Can I please get a copies of the following:
- MBIE's security risk assessment tool template (with functioning macros if they exist and the tool is an excel spreadsheet)
- MBIE's privacy risk assessment tool template (with functioning macros if they exist and the tool is an excel spreadsheet)
- Any guidance or other templates associated with the above tools
Thank you!
Yours faithfully,
Will
From: Ministerial Services
Ministry of Business, Innovation & Employment
Ref: 2122-2328
Dear Will,
On behalf of the Ministry of Business, Innovation and Employment I
acknowledge your email of the 14^th of June 2022 requesting under the
Official Information Act 1982 (the Act), the following:
“Can I please get a copies of the following:
- MBIE's security risk assessment tool template (with functioning macros
if they exist and the tool is an excel spreadsheet)
- MBIE's privacy risk assessment tool template (with functioning macros if
they exist and the tool is an excel spreadsheet)
- Any guidance or other templates associated with the above tools”
Your request is being processed in accordance with the Act and a response
will be sent to you in due course.
If you have any enquiries regarding your request, or its urgency, feel
free to contact us via email at [1][MBIE request email].
Nâku noa, nâ
MINISTERIAL SERVICES
Ngâ Pou o te Taumaru
Ministry of Business, Innovation and Employment
Level 4, 15 Stout Street, PO Box 1473, Wellington 6140
NZBN 9429000106078
[2]www.govt.nz - your guide to finding and using New Zealand government
services
--------------------------------------------------------------------------
Any opinions expressed in this message are not necessarily those of the
Ministry of Business, Innovation and Employment. This message and any
files transmitted with it are confidential and solely for the use of the
intended recipient. If you are not the intended recipient or the person
responsible for delivery to the intended recipient, be advised that you
have received this message in error and that any use is strictly
prohibited. Please contact the sender and delete the message and any
attachment from your computer.
--------------------------------------------------------------------------
References
Visible links
1. mailto:[MBIE request email]
2. http://www.govt.nz/
hide quoted sections
From: *OIA
Ministry of Business, Innovation & Employment
Tçnâ koe Will
Thank you for your request of 14 June 2022 to MBIE, for the following
information under the Official Information Act 1982 (the OIA):
o MBIE's security risk assessment tool template (with functioning macros
if they exist and the tool is an excel spreadsheet)
o MBIE's privacy risk assessment tool template (with functioning macros
if they exist and the tool is an excel spreadsheet)
o Any guidance or other templates associated with the above tools
As worded, we aren’t able to progress your request, because we aren’t able
to match the parameters of your request to any of our existing documents.
To help us to respond to your request, we’d like if you could provide us
with some advice about the information you’re looking for, so we can
locate the appropriate information in a timely manner.
In particular, we would like to know if there is anything more you can
tell us about the types of templates you’re looking for.
We’d appreciate if you can provide us with your response by 1 July 2022.
You can do this by emailing [1][email address]. This
is also the email address to use if you have any further questions about
this matter.
Please note, because this clarification was sent within seven working days
of the receipt of your original request, the deadline for responding will
be reset by 20 days, in line with section 15(1AA) of the OIA.
Ngâ mihi mahana,
Ministerial Services | Engagement, Communications and Ministerial Services
[2][MBIE request email]
Hîkina Whakatutuki Ministry of Business, Innovation & Employment
15 Stout Street, Wellington 6011
PO Box 1473, Wellington 6140
[3]www.mbie.govt.nz
[4]Values image for email signatures.
(etc)
[5]www.govt.nz - your guide to finding and using New Zealand government
services
--------------------------------------------------------------------------
Any opinions expressed in this message are not necessarily those of the
Ministry of Business, Innovation and Employment. This message and any
files transmitted with it are confidential and solely for the use of the
intended recipient. If you are not the intended recipient or the person
responsible for delivery to the intended recipient, be advised that you
have received this message in error and that any use is strictly
prohibited. Please contact the sender and delete the message and any
attachment from your computer.
--------------------------------------------------------------------------
References
Visible links
1. mailto:[email address]
2. mailto:[MBIE request email]
3. https://aus01.safelinks.protection.outlo...
5. http://www.govt.nz/
hide quoted sections
From: Will O'Brien
Dear *OIA,
I am looking to get a copy of the template MBIE uses for its information security risk assessments (a word doc or excel spreadsheet). This would be what I imagine the security team would begin with when assessing systems, projects etc against the NZISM, before providing an Authority To Operate.
I would also like to get a copy of the template MBIE uses for its privacy impact assessments (a word doc or excel spreadsheet). This would be what I imagine the privacy team would use to document projects and their privacy risks as against the Privacy Act 2020.
I would also like any other guidance or templates associated with the above (essentially, copies of documents used for the information security risk assessment process and copies of documents used for the privacy impact assessment process).
I hope this clarification helps.
Yours sincerely,
Will O'Brien
From: Ngā Pou o te Taumaru ODS Official Correspondence
Ministry of Business, Innovation & Employment
Tçnâ koe Will
Thank you for your clarified request of 3 July 2022, under the Official
Information Act 1982 (the OIA) for:
o a copy of the template MBIE uses for its information security risk
assessments (a word doc or excel spreadsheet).
o a copy of the template MBIE uses for its privacy impact assessments (a
word doc or excel spreadsheet).
o any other guidance or templates associated with the above
This is a short email to advise that we are extending the time frame for
responding to this request by an additional 20 working days under section
15A(1)(a) of the OIA, due to the consultations required to provide a
response.
The templates you’ve requested are used to identify and manage risks
associated with MBIE’s operations, and because of this, we need to consult
affected business groups to ensure we are able to apply the OIA correctly
to the material in scope of your request.
The new due date for responding to the request will be 10 August 2022. We
will endeavour to provide a response before this date.
If you have any questions about your response in the meantime, please feel
free to email us at [1][email address].
Nâ mâtou noa, nâ
Ministerial Services | Engagement, Communications and Ministerial Services
[2][MBIE request email]
Hîkina Whakatutuki Ministry of Business, Innovation & Employment
15 Stout Street, Wellington 6011
PO Box 1473, Wellington 6140
[3]www.mbie.govt.nz
[4]Values image for email signatures.
[5]www.govt.nz - your guide to finding and using New Zealand government
services
--------------------------------------------------------------------------
Any opinions expressed in this message are not necessarily those of the
Ministry of Business, Innovation and Employment. This message and any
files transmitted with it are confidential and solely for the use of the
intended recipient. If you are not the intended recipient or the person
responsible for delivery to the intended recipient, be advised that you
have received this message in error and that any use is strictly
prohibited. Please contact the sender and delete the message and any
attachment from your computer.
--------------------------------------------------------------------------
References
Visible links
1. mailto:[email address]
2. mailto:[MBIE request email]
3. https://aus01.safelinks.protection.outlo...
5. http://www.govt.nz/
hide quoted sections
From: *OIA
Ministry of Business, Innovation & Employment
Tçnâ koe Will
Please find attached MBIE’s response to your OIA request for copies of our
information security and Privacy Impact Assessment templates:
o A PDF with our response letter and associated release documents, and
o A copy of the Privacy Impact Assessment Tool spreadsheet.
Please accept our sincere apologies for our late response.
Nâ mâtou noa, nâ
Ministerial Services | Engagement, Communications and Ministerial Services
[1][MBIE request email]
Hîkina Whakatutuki Ministry of Business, Innovation & Employment
15 Stout Street, Wellington 6011
PO Box 1473, Wellington 6140
[2]www.mbie.govt.nz
[3]Values image for email signatures.
References
Visible links
1. mailto:[MBIE request email]
2. https://aus01.safelinks.protection.outlo...
Things to do with this request
- Add an annotation (to help the requester or others)
- Download a zip file of all correspondence