Back to All Events

Managing IT Risks in your Organisation

  • Community Waikato 33 Victoria Street Hamilton, Waikato, 3204 New Zealand (map)

Presented by Brendan Gray and AdviseIT

You will learn: What is in the Privacy Act 2020 and what does that mean for the IT systems in my organisation? How does that fit into the overall IT Risks and how do I manage them? This workshop includes a toolkit with templates, examples and other resources for identifying information assets, analysing and documenting risks and developing risk treatment plans.

The Privacy Act 2020 comes into force on 1 December 2020.  This is an update to the previous Privacy Act 1993, which provided the principals on how organisations need to treat the Personal Information that they collect, store and use.

It is important that everyone in the organisation knows what is expected of them when it comes to dealing with other people’s personal information, from staff and volunteers who may be collecting and entering data, to directors and trustees who need to ensure the IT systems in place are robust and secure.  The organisation needs to have appropriate policies and procedures in place, so that any information is safe, secure and used appropriately.

The Privacy Act deals with personal information that you collect, store and use, which is just some of the data that you have on your IT systems.  When looking at complying with the Privacy Act, there is the wider scope of all the data that you have to consider as well.  There are internationally recognised frameworks to manage data security risks, such as ISO 270001 standards and NIST framework, but how do you apply these to an organisation the scale of yours?

This workshop will step you through the process of identifying what you need to protect and what all the risks are.  You will then be shown how to analyse and assess the risks, determine your risk appetite and work out the appropriate risk responses. 

While going through the process is something that everyone organisation should do, it is also important to document it, as evidence of what you have done and the decisions that have been made.  All attendees will receive a toolkit of templates and resources that can be used to document a full Risk Report and Treatment Plan.


$130 (Community)

$260 (Non-Community)


Register now using the form below


If you have questions, please contact Sally on 07 282 0744 or sally@communitywaikato.org.nz