| Sensitive information is exposed. |
Possible |
Severe |
High |
- Terms & Conditions Policy displayed on website.
- Privacy Policy displayed on website.
- Code of Conduct Policy displayed on website.
- Cookie Policy displayed on website.
- Multi-factor account authentication through Bitwarden.
- Strong unique passwords, limited access permissions, regular software/plugin updates through Custom Code IT.
- Secure hosting and tested backups through Custom Code IT.
|
| Privacy obligations are misunderstood |
Possible |
Major |
High |
- Terms & Conditions Policy displayed on website.
- Privacy Policy displayed on website.
- Code of Conduct Policy displayed on website.
- Cookie Policy displayed on website.
- Multi-factor account authentication through Bitwarden.
- Strong unique passwords, limited access permissions, regular software/plugin updates through Custom Code IT.
- Secure hosting and tested backups through Custom Code IT.
|
| Automated & AI Use |
Possible |
Major |
High |
- Terms & Conditions Policy displayed on website.
- Privacy Policy displayed on website.
- Code of Conduct Policy displayed on website.
- Cookie Policy displayed on website.
- Multi-factor account authentication through Bitwarden.
- Strong unique passwords, limited access permissions, regular software/plugin updates through Custom Code IT.
- Secure hosting and tested backups through Custom Code IT.
|
| Clients assume guarantees NDIS, clinical or compliance |
Possible |
Major |
High |
- Daily information gathering practices.
- Monthly internal and external website monitoring including DCA.
- Immediate referral externally from DCA when required.
- Monthly networking practices, information collection and compliance checks
- Consistent internal referral to and teaching practices through written guidelines not personal opinions.
|
| Inaccurate or out of date information, resources, practices, guidance. |
Possible |
Moderate |
High |
- Daily information gathering practices.
- Monthly internal and external website monitoring including DCA.
- Immediate referral externally from DCA when required.
- Monthly networking practices, information collection and compliance checks
- Consistent internal referral to and teaching practices through written guidelines not personal opinions.
|
| Unauthorised access, malware or website disruption |
Possible |
Major |
High |
- Multi-factor account authentication through Bitwarden.
- Strong unique passwords, limited access permissions, regular software/plugin updates through Custom Code IT.
- Secure hosting and tested backups through Custom Code IT.
|
| Payment or order data compromised |
Possible |
Major |
High |
- Multi-factor account authentication through Bitwarden.
- External & vetted provider being Stripe for payments and transactions.
- Strong unique passwords, limited access permissions, regular software/plugin updates through Custom Code IT.
- Secure hosting and tested backups through Custom Code IT.
|
| Incorrect price, discount, delivery time or product description misleads clients |
Possible |
Moderate |
High |
- Terms & Conditions Policy displayed on website.
- Daily information gathering practices.
- Monthly internal and external website monitoring including DCA.
- Annual product and resource reviews
- Immediate referral externally from DCA when required.
- Monthly networking practices, information collection and compliance checks
- Consistent internal referral to and teaching practices through written guidelines not personal opinions.
|
| Website is difficult for people with disability to use |
Possible |
Moderate |
High |
- Use of clear headings, readable text, strong contrast, descriptive buttons and image text alternatives.
- Site testing using a keyboard and a mobile phone,
- Make contact and ordering options easy to find.
- No jargon used on website.
|
| Privacy, refund, shipping or contact information is missing or unclear |
Possible |
Major |
High |
- Terms & Conditions Policy displayed on website.
- Use of clear headings, readable text, strong contrast, descriptive buttons and image text alternatives.
- Site testing using a keyboard and a mobile phone,
- Make contact and ordering options easy to find.
|
| Underage, not age appropriate, abusive behaviour or sensitive information shown |
Possible |
Major |
High |
- Terms & Conditions Policy displayed on website.
- Privacy Policy displayed on website.
- Code of Conduct Policy displayed on website.
- Cookie Policy displayed on website.
|
| Misuse of submitted information |
Possible |
Major |
High |
- Terms & Conditions Policy displayed on website.
- Privacy Policy displayed on website.
- Code of Conduct Policy displayed on website.
- Cookie Policy displayed on website.
|
| No clear way to raise a concern or complaint. |
Possible |
Major |
High |
- Terms & Conditions Policy displayed on website.
- Privacy Policy displayed on website.
- Code of Conduct Policy displayed on website.
- Cookie Policy displayed on website.
|
