Retain Confidentiality

Where the Polices, Procedures and Processes provide for confidentiality of a disclosure, all of the organisation systems, processes and controls should be reviewed to ensure that they:

  • Support that objective
  • Do not compromise that requirement
  • Are effective in practice