What action has the Government taken to downgrade the “Medium to High” risk departments and agencies to a lower risk category?
• Only seven out of 160 institutions included in the assessment rated themselves in the “Medium to High category”. These institutions have already begun taking steps to mitigate potential risks by taking measures such as using contractual provisions and auditing and segregating databases. Moreover, the concerns will be addressed further when the contracts come up for renewal. • TBS has produced a guidance document to assist federal institutions before they make a decision to engage in outsourcing that involves personal or other sensitive information, whether within Canada or across borders. • The Government has asked the seven institutions that identified a medium to high risk to submit updates on their plans to address these risks and to report on those risks that have been addressed since submitting their initial assessment. • In addition, the Government initiated quarterly reporting against the implementation plans of these seven institutions. • We have also requested quarterly prog
