Self-Assessment Update Grace Periods

We are aware that timing of updates to the Security and Privacy Self-Assessment questions can be quite difficult to manage.

As a result we have now added an ‘effective from’ column in the Document Control tab of the validation workbook. We will also make it clear to Parties in the email communication that is distributed.

We are going to allow a 3 week grace period where major updates are made to the Self-Assessment questions.

Hypothetically;

• 27^th March 2020 new questions (significant changes) are published
• They would not come into effect until the assessments for the w/c 20^th April 2020.
• Parties with SSAs on the w/c 30^th March, 6^th and 13^th April would not be subject to the new questions.

For amendments with minor clarifications a 1 week grace period will be given.

Our Security Validation Workbook can be found here and our Privacy Validation Workbook can be found here.