Risk Assessment Report: Data Security and Confidentiality

This document presents a detailed risk assessment activity, focusing on the potential hazards associated with data security and confidentiality. It identifies various risks, including the lack of confidentiality and its implications, such as the risk of theft of personal data, along with legal and social risks. The assessment outlines the individuals and groups who might be harmed, and it evaluates existing control measures designed to mitigate these risks. Furthermore, the report specifies additional control measures needed to reduce the risk to an acceptable level, detailing the person responsible for each action, the action due date, and the corresponding risk level. The document includes a risk assessment matrix to determine the severity and likelihood of potential risks, prioritizing actions and defining completion timelines. The report also provides an explanatory note that clarifies the risk levels and action priorities, ensuring that the risk is reduced through prevention and control measures.

Risk Assessment
Activity: Reference No:
Assessed By:
Location
:
Issue Date:
Revision Due:
Hazard
Who
might
be
harmed
and how
Existing Control
Measures
(What are you already doing
already to manage the risks?)
Additional Control Measures
(Are additional control measures required to bring the risk down
to an acceptable level? If so these should be detailed here)
Person for
Action
Acti
on
Due
By
Risk
Lev
el
Physical
risk.
Harm to the
participants
who are
carrying out
research.
Necessary precautionary
measures to comply with health
and safety standards and law are
of key relevance importance.
Development of the risk management and risk mitigation plan
helps in controlling physical risk.
The risk
management
team.
27th
June,
2020.
6
Lack of
confidentia
lity (Risk of
theft of
personal
data).
The
researcher
and the
participants
are affected.
Data encryption is an effective
control measure.
Use of advanced software and hardware which helps in
protecting the data.
Technical team. 15th
July,
2020.
15
Legal risk The
researcher
and the
participants
are affected.
Continuously complying with the
legal laws, rule and standards.
Reducing disputes and maintaining appropriate records for legal
management.
The legal team. 25th
July,
2020.
18
Social risk The
researcher
and the
participants
are affected
Maintaining anonymity and
giving respect to each
participants.
Maintaining both formal and informal relationship. Management
team
30th
July.
10
Risk Assessment Actions
Safety, Health and Environment Team Page 1 of 4 Ext 3565
Administration/Templates/Forms/Risk Assessment V2.2 Updated March 2017

Activity Reference
No.
Action Required By Whom Priorit
y
Completio
n Due
Date
Completed
Signature
Complete range of timeline and risk must be mentioned in order to reduce
the risk associated with the research.
Management
team
High 28th June, 2020 27th June, 2020
Developing encrypted security network. Technical team High 18th July, 2020 14th July, 2020
Completely ensuring that the research has been complied with the litigations
and legal management software.
Legal team. High 22nd July, 2020. 20th July, 2020.
The researcher and management team must focus on maintaining both
formal and informal relationship.
Management
team
Medium 28th july, 2020. 25th July, 2020.
Name of Assessor Signature of Assessor
Date actions
passed to
individuals for
action:
Safety, Health and Environment Team Page 2 of 4 Ext 3565
Administration/Templates/Forms/Risk Assessment V2.2 Updated March 2017

Risk
Ass
ess
men
t
Mat
rix
RISK
S
e
v
er
it
y
5 5 15 25 Multiple fatality 5 Very Likely
4 4 12 20 Fatality 4 Likely
3 3 9 15 Major injury 3 50/50
2 2 6 10 Minor injury 2 Unlikely
1 1 3 5 Negligible impact 1 Very Unlikely
1 2 3 4
Likelihood
The aim is to reduce the risk by prevention or control measures so far as is reasonably practicable.
Explanatory Note:
Risk Likelihood
16-25 Very high (Do not proceed without authorisation
from your Dean/Director)
Very Likely Most likely to occur than not.
12-15 High Likely The event will occur in most circumstances.
6-10 Medium 50/50 Has the potential to occur
1-5 Low Unlikely Unlikely to occur
Very Unlikely The event may only occur in exceptional
circumstances.
Severity Action Priority
Multi fatality Self-explanatory Low 6 months to complete
Safety, Health and Environment Team Page 3 of 4 Ext 3565
Administration/Templates/Forms/Risk Assessment V2.2 Updated March 2017

Fatality Self-explanatory Medium 3 months to complete
Major injury Reportable incident under RIDDOR such as
fracture of bones, dislocation, amputation,
occupational diseases (e.g. asthma, dermatitis),
loss of sight.
High 1 month to complete or to make satisfactory progress
Immediate Activity should not proceed until satisfactory progress
has been made.
Minor injury First aid administered. This would include minor,
cuts, bruising, abrasions and strains or sprains of
ligaments, tendons, muscles
Negligible impact Self-explanatory
Safety, Health and Environment Team Page 4 of 4 Ext 3565
Administration/Templates/Forms/Risk Assessment V2.2 Updated March 2017