British Columbia



-68580-7620000STATEMENT OF ACCEPTABLE RISKFor guidelines on completing this form please refer to the SOAR guidelines document.SECTION A – TRACKING INFORMATIONAssessment Reference Number: <#>Business Owner: <FULL NAME & TITLE>System Name: <SYSTEM NAME>Primary Risk Evaluator: <FULL NAME & TITLE>Branch & Division: <BRANCH & DIVISION>Date supporting documentation was completed: <DATE>Ministry: <MINISTRY>Date SOAR review and sign-off is requested by: <DATE>Contains Sensitive or Personal Information? <NO / YES>Critical System? <NO / YES>Description (e.g. executive summary, system description, assessment description, high level findings, comments, recommendations):SECTION B – RISK ASSESSMENT TABLEIf more rows are needed please copy from an existing row to keep the drop-downs available. If no risks are identified in the SOAR provide a justification in the description box in Section A and reference the location of any existing related risk documentation. RISK REF #RISK NAMEPRIMARY RISKTYPEInstruction: Choose the type that most closely matches the risk.RISKRATINGACTIONPLANInstruction: Select a plan type.SHORT DESCRIPTION<SELECT TYPE><SELECT RATING><SELECT PLAN><SELECT TYPE><SELECT RATING><SELECT PLAN><SELECT TYPE><SELECT RATING><SELECT PLAN><SELECT TYPE><SELECT RATING><SELECT PLAN><SELECT TYPE><SELECT RATING><SELECT PLAN>SECTION C - ACCEPTANCEPlease do not remove or change the signature blocks marked “required”. Digital or printed signatures are acceptable. SOAR completion marks the completion of a Security Threat and Risk Assessment (STRA). A SOAR is complete once required signatures have been collected. Signing below constitutes your recommendation of this SOAR to the Ministry Chief Information Officer. SignatureName ______________________________ ______________________________Date<DATE><DATE>Signing below constitutes acceptance of the risks in Section B, their ratings, and action plans.Submission InstructionsSignatureName ______________________________ Date<DATE>Submit this signed form to the Information Security Risk Management SharePoint site () in your ministry folder.For questions email the OCIO Information Security Branch at: VulnerabilityandRiskManagement@gov.bc.ca Any questions regarding this form can also be directed to this email. Once submitted the CISO will sign to acknowledge receipt.RECEIPT OF SOAR - FOR OFFICE USE ONLYSigning below acknowledges receipt of the SOAR. This marks the completion of the risk assessment. SOARs which are obviously incomplete or inaccurate will not receive a signature.Signature Date ................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download