accreditedInformation officers are required to ensure personal information impact assessments are completed for all processing operations and appropriate technical and organisaional measures implemented to safequard personal information. Make use of a proven methodology.  

More about impact assessments ...