We don't know whether the most recent response to this request contains information or not – if you are Will O'Brien please sign in and let everyone know.

MBIE's security and privacy risk assessment templates & guidance

Will O'Brien made this Official Information request to Ministry of Business, Innovation & Employment

This request has an unknown status. We're waiting for Will O'Brien to read recent responses and update the status.

From: Will O'Brien

Dear Ministry of Business, Innovation & Employment,

Can I please get a copies of the following:
- MBIE's security risk assessment tool template (with functioning macros if they exist and the tool is an excel spreadsheet)
- MBIE's privacy risk assessment tool template (with functioning macros if they exist and the tool is an excel spreadsheet)
- Any guidance or other templates associated with the above tools

Thank you!

Yours faithfully,
Will

Link to this

From: Ministerial Services
Ministry of Business, Innovation & Employment

Ref: 2122-2328

 

Dear Will,

 

On behalf of the Ministry of Business, Innovation and Employment I
acknowledge your email of the 14^th of June 2022 requesting under the
Official Information Act 1982 (the Act), the following:

 

“Can I please get a copies of the following:

- MBIE's security risk assessment tool template (with functioning macros
if they exist and the tool is an excel spreadsheet)

- MBIE's privacy risk assessment tool template (with functioning macros if
they exist and the tool is an excel spreadsheet)

- Any guidance or other templates associated with the above tools”

 

Your request is being processed in accordance with the Act and a response
will be sent to you in due course.

 

If you have any enquiries regarding your request, or its urgency, feel
free to contact us via email at [1][MBIE request email].

 

Nâku noa, nâ

MINISTERIAL SERVICES

               

Ngâ Pou o te Taumaru

Ministry of Business, Innovation and Employment

Level 4, 15 Stout Street, PO Box 1473, Wellington 6140

NZBN 9429000106078

 

 

[2]www.govt.nz - your guide to finding and using New Zealand government
services

--------------------------------------------------------------------------

Any opinions expressed in this message are not necessarily those of the
Ministry of Business, Innovation and Employment. This message and any
files transmitted with it are confidential and solely for the use of the
intended recipient. If you are not the intended recipient or the person
responsible for delivery to the intended recipient, be advised that you
have received this message in error and that any use is strictly
prohibited. Please contact the sender and delete the message and any
attachment from your computer.

--------------------------------------------------------------------------

References

Visible links
1. mailto:[MBIE request email]
2. http://www.govt.nz/

hide quoted sections

Link to this

From: *OIA
Ministry of Business, Innovation & Employment


Attachment image001.jpg
14K Download


Tçnâ koe Will

 

Thank you for your request of 14 June 2022 to MBIE, for the following
information under the Official Information Act 1982 (the OIA):

 

o MBIE's security risk assessment tool template (with functioning macros
if they exist and the tool is an excel spreadsheet)
o MBIE's privacy risk assessment tool template (with functioning macros
if they exist and the tool is an excel spreadsheet)
o Any guidance or other templates associated with the above tools

 

As worded, we aren’t able to progress your request, because we aren’t able
to match the parameters of your request to any of our existing documents.

 

To help us to respond to your request, we’d like if you could provide us
with some advice about the information you’re looking for, so we can
locate the appropriate information in a timely manner.

 

In particular, we would like to know if there is anything more you can
tell us about the types of templates you’re looking for.

 

We’d appreciate if you can provide us with your response by 1 July 2022.
You can do this by emailing [1][email address]. This
is also the email address to use if you have any further questions about
this matter.

 

Please note, because this clarification was sent within seven working days
of the receipt of your original request, the deadline for responding will
be reset by 20 days, in line with section 15(1AA) of the OIA.

 

Ngâ mihi mahana,

 

Ministerial Services | Engagement, Communications and Ministerial Services

[2][MBIE request email]

Hîkina Whakatutuki Ministry of Business, Innovation & Employment

15 Stout Street, Wellington 6011

PO Box 1473, Wellington 6140

[3]www.mbie.govt.nz

[4]Values image for email signatures.

 

 

(etc)

[5]www.govt.nz - your guide to finding and using New Zealand government
services

--------------------------------------------------------------------------

Any opinions expressed in this message are not necessarily those of the
Ministry of Business, Innovation and Employment. This message and any
files transmitted with it are confidential and solely for the use of the
intended recipient. If you are not the intended recipient or the person
responsible for delivery to the intended recipient, be advised that you
have received this message in error and that any use is strictly
prohibited. Please contact the sender and delete the message and any
attachment from your computer.

--------------------------------------------------------------------------

References

Visible links
1. mailto:[email address]
2. mailto:[MBIE request email]
3. https://aus01.safelinks.protection.outlo...
5. http://www.govt.nz/

hide quoted sections

Link to this

From: Will O'Brien

Dear *OIA,

I am looking to get a copy of the template MBIE uses for its information security risk assessments (a word doc or excel spreadsheet). This would be what I imagine the security team would begin with when assessing systems, projects etc against the NZISM, before providing an Authority To Operate.

I would also like to get a copy of the template MBIE uses for its privacy impact assessments (a word doc or excel spreadsheet). This would be what I imagine the privacy team would use to document projects and their privacy risks as against the Privacy Act 2020.

I would also like any other guidance or templates associated with the above (essentially, copies of documents used for the information security risk assessment process and copies of documents used for the privacy impact assessment process).

I hope this clarification helps.

Yours sincerely,

Will O'Brien

Link to this

From: Ngā Pou o te Taumaru ODS Official Correspondence
Ministry of Business, Innovation & Employment


Attachment image001.jpg
14K Download


Tçnâ koe Will

                              

Thank you for your clarified request of 3 July 2022, under the Official
Information Act 1982 (the OIA) for:

 

o a copy of the template MBIE uses for its information security risk
assessments (a word doc or excel spreadsheet).
o a copy of the template MBIE uses for its privacy impact assessments (a
word doc or excel spreadsheet).
o any other guidance or templates associated with the above

 

This is a short email to advise that we are extending the time frame for
responding to this request by an additional 20 working days under section
15A(1)(a) of the OIA, due to the consultations required to provide a
response.

 

The templates you’ve requested are used to identify and manage risks
associated with MBIE’s operations, and because of this, we need to consult
affected business groups to ensure we are able to apply the OIA correctly
to the material in scope of your request.

 

The new due date for responding to the request will be 10 August 2022. We
will endeavour to provide a response before this date.

 

If you have any questions about your response in the meantime, please feel
free to email us at [1][email address]. 

 

Nâ mâtou noa, nâ

 

Ministerial Services | Engagement, Communications and Ministerial Services

[2][MBIE request email]

Hîkina Whakatutuki Ministry of Business, Innovation & Employment

15 Stout Street, Wellington 6011

PO Box 1473, Wellington 6140

[3]www.mbie.govt.nz

[4]Values image for email signatures.

 

 

[5]www.govt.nz - your guide to finding and using New Zealand government
services

--------------------------------------------------------------------------

Any opinions expressed in this message are not necessarily those of the
Ministry of Business, Innovation and Employment. This message and any
files transmitted with it are confidential and solely for the use of the
intended recipient. If you are not the intended recipient or the person
responsible for delivery to the intended recipient, be advised that you
have received this message in error and that any use is strictly
prohibited. Please contact the sender and delete the message and any
attachment from your computer.

--------------------------------------------------------------------------

References

Visible links
1. mailto:[email address]
2. mailto:[MBIE request email]
3. https://aus01.safelinks.protection.outlo...
5. http://www.govt.nz/

hide quoted sections

Link to this

From: *OIA
Ministry of Business, Innovation & Employment


Attachment image001.jpg
14K Download

Attachment Privacy impact assessment tool.xlsb
187K Download

Attachment OIA 2122 2328.pdf
8.2M Download View as HTML


Tçnâ koe Will

 

Please find attached MBIE’s response to your OIA request for copies of our
information security and Privacy Impact Assessment templates:

 

o A PDF with our response letter and associated release documents, and
o A copy of the Privacy Impact Assessment Tool spreadsheet.

 

Please accept our sincere apologies for our late response.

 

Nâ mâtou noa, nâ

 

Ministerial Services | Engagement, Communications and Ministerial Services

[1][MBIE request email]

Hîkina Whakatutuki Ministry of Business, Innovation & Employment

15 Stout Street, Wellington 6011

PO Box 1473, Wellington 6140

[2]www.mbie.govt.nz

[3]Values image for email signatures.

 

References

Visible links
1. mailto:[MBIE request email]
2. https://aus01.safelinks.protection.outlo...

Link to this

We don't know whether the most recent response to this request contains information or not – if you are Will O'Brien please sign in and let everyone know.

Things to do with this request

Anyone:
Ministry of Business, Innovation & Employment only: