Information Handling
What is Information Handling?
The procedures for creating, processing, storing, transmitting, and disposing of information according to its classification and sensitivity.
Frameworks that govern information handling
What the standards actually require on information handling
Requirements naming information handling across 6 standards, quoted from the control text.
The organisation identifies and documents defined uses and disclosures of personal information collections, describes the purposes in privacy notices and policies, restricts uses and disclosures to those compatible with the purpose or permitted by the Privacy...
canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::PT-03 · PT-03 Personal information handling uses and disclosures →Develop and maintain processes that make the handling of personal information consistent with the entity's obligations. The processes cover the whole information lifecycle (before collection, after collection, while held and once no longer needed), give extra...
oaic-privacy-management-framework::2.2 · 2.2 Maintain personal information handling processes across the lifecycle →Providers must strengthen information-content management, establish feature libraries to identify illegal and undesirable information, label or stop transmission, and report illegal information to authorities;
CN-ALG-A9 · Illegal and Harmful Information Handling →Apply handling rules and sensitivity markings such as the Traffic Light Protocol to shared cyber threat information so recipients understand redistribution constraints.
TIS-5 · Information Handling and Sensitivity Marking →The Minister may make a code for each regulated sector. A code must be consistent with the principles, may describe reasonable steps and reasonable times, may add duties for certain services and consumers, agents, fees and information handling, and may make it...
australia-scams-prevention-framework-competition-and-consumer-act-2010-part-ivf::s58CC · ss 58CB and 58CC Comply with the sector SPF code once made →Countries establish a financial intelligence unit as the national centre for receiving and analysing suspicious transaction reports and other information relevant to money laundering, predicate offences and terrorist financing and for disseminating the results...
fatf-40-recommendations::R.29 · R.29 Financial intelligence units →Questions people ask about information handling
What is Information Handling?
Why is Information Handling important for compliance?
Which compliance frameworks address Information Handling?
Where can I learn more about Information Handling?
See how Information Handling applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.