Generate My DIAL Rating

1. Volume of data

This refers to the volume of data due to be processed. Asset recovery is a physical process and focuses on overall storage capacity. Therefore, we would need to (as a data controller) determine the overall capacity of storage rather than a volume of data.

2. Impact of a breach on your business

As a data controller you need to assess the impact would have on your business. When deciding this impact, take into consideration your business type, the scale of data being processed, your profile and lastly the type of data you wish to be processed.

3. Categories of data

Refers to the categories of data you need processing. These categories align with UK GDPR.

4. Threat to the business

You as a data controller need to determine where threats to your data/business are likely to come from. Who is likely to want to gain access to this data? What are the motivating factors behind their actions? Is it financial, intellectual property theft or is it another purpose?

5. Appetite to risk

This refers to the levels of risk that your business is willing to accept. Businesses will want to consider the previous risk factors and judge the levels of service required.

6. Scope

You should state the scope which this DIAL rating can be used. Is it for a particular collection, a particular site or can it be used as a company wide DIAL.