We are aware that timing of updates to the Security and Privacy Self-Assessment questions can be quite difficult to manage.
As a result we have now added an ‘effective from’ column in the Document Control tab of the validation workbook. We will also make it clear to Parties in the email communication that is distributed.
We are going to allow a 3 week grace period where major updates are made to the Self-Assessment questions.
- 27th March 2020 new questions (significant changes) are published
- They would not come into effect until the assessments for the w/c 20th April 2020.
- Parties with SSAs on the w/c 30th March, 6th and 13th April would not be subject to the new questions.
For amendments with minor clarifications a 1 week grace period will be given.