The policy requires all employees to manage risks. It provides guidance on risk management and business continuity planning by integrating risk identification, assessment and reporting into everyday operations.

Details the approval process for external parties wanting to conduct research on Department sites and information requirements for research projects regarding consent, participation, withdrawal, required checks and confidentiality.

These procedures provide information for employees in relation to their obligations and responsibilities with respect to managing information breaches.