Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Part of Cloud security good practice guide

2. Overview of the method

This Good Practice Guideline (GPG) is a 4 step process. It should be used at the start of any digital project to understand the risk of the data that needs to be stored and processed and the safeguards that must be put in place to do so.   

The 4 steps
  • Step 1 - Understand the data you are dealing with
  • Step 2 - Assess the risks associated with the data
  • Step 3 - Implement appropriate controls
  • Step 4 - Monitor the implementation and ongoing risks

Last edited: 1 March 2022 7:29 am