Australia IRAP - Information Security Registered Assessors Program
IRAP Policy and Procedures: assessment-conduct duties – Australia IRAP - Information Security Registered Assessors Program

Australia IRAP - Information Security Registered Assessors Program PP-4.3.3: Handle personal information under the Privacy Act 1988

What does PP-4.3.3 require?

Assessors must handle all information collected in IRAP engagements in accordance with the Privacy Act 1988 (Cth), considering the Australian Privacy Principles when collecting, using, disclosing or storing personal information at every stage of an assessment (4.3.3), and must understand and comply with the customer's confidentiality arrangements (4.3.6); breaches of confidentiality may lead to revocation (4.3.7).

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in IRAP Policy and Procedures: assessment-conduct duties – Australia IRAP - Information Security Registered Assessors Program

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Australia IRAP - Information Security Registered Assessors Program controls