DIAL Rating Generator

Your Details

Required Name

Required Email

Required Business name

Required Job Title

Step 1: Volume of Data

This refers to the volume of data due to be processed. Asset recovery is a physical process and focuses on overall storage capacity. Therefore, we would need to (as a data controller) determine the overall capacity of storage rather than a volume of data.

Low Risk – A known number of data carrying media are being disposed of which contains a total of under 10Tb of overall capacity of storage.

Medium Risk – A known number of data carrying media are being disposed of which contains over 10Tb of overall capacity of storage.

High Risk – An unknown number of data carrying media are being disposed of.

Step 2: Impact of Breach

As a data controller you need to assess the impact a data breach would have on your business.

Low Impact – Press coverage and brand erosion.

Medium Impact – Possible legal action by data subjects and possible regulatory action.

High Impact – Possible legal action by data subjects and possible regulatory action. Plus possible share price damage and / or competitive advantage erosion.

Step 3: Categories of Data

Refers to the categories of data you need processing. These categories align with UK GDPR.

Low Risk – Non-confidential data which might be available in the public domain.

Medium Risk – Personal Data and Corporate Data.

High Risk – Same as (2) but including special category and / or corporate secret data.

Step 4: Threat of Risk

You as a data controller need to determine where threats to your data/business are likely to come from. Who is likely to want to gain access to this data? What are the motivating factors behind their actions? Is it financial, intellectual property theft or is it another purpose?

Low Risk – Casual or opportunistic threat actor only able to mount unsophisticated attacks.

Medium Risk – Motivated, targeted threat actor such as organised crime or journalists or hackers applying professional methods to access the physical device and / or data.

High Risk – Government-sponsored organisations using sophisticated techniques with unlimited time and resources to access the physical device and / or data.

Step 5: Appetite to Risk

This refers to the levels of risk that your business is willing to accept. Businesses will want to consider the previous risk factors and judge the levels of service required.

Low Appetite to Risk – All results must lead to no further actions or risk treatments.

Medium Appetite to Risk – Additional risk treatments are available but at additional cost.

High Appetite to Risk – Most cost-effective risk management approach which manages risk but has recommendations for additional risk treatments.

Scope

You should state the scope which this DIAL rating can be used. Is it for a particular collection, a particular site or can it be used as a company wide DIAL.

For all collections from any address for the company listed on this certificate until 31 December 2030, unless specified below

For all collections listed on this certificate until the valid to date.

For a single collection from the address listed on this certificate. The valid to date must be after the collection date

Other – please specify the scope for which this DIAL can be used.

Please specify the scope for which this DIAL can be used.

Valid to Date

Generate Your DIAL rating