4.9. System review
The system review measures a single system against the system governance criteria and identifies issues with it.
The system review is used as a sub-process of other processes, particularly:
The system review is also used as a stand-alone process to review new systems, or reassess existing systems between annual reviews. The conditions under which it is used will have been defined during initiation, and documented in the terms of reference.
The system review is carried out by the system governance manager, or their team.
Assess system
- Responsible:
- System governance manager
- Involved:
- none
For first-time assessments, assess the system against all the system governance criteria.
For reassessments, assess the system against all new criteria, and check and if necessary amend responses for existing criteria.
Check with system owners or other suitable authorities that the responses are factually correct.
Validate assessment
- Responsible:
- System governance manager
- Involved:
- none
Validate the assessment. Address any issues with assessments that are not validated.
Analyse system
- Responsible:
- System governance manager
- Involved:
- none
Calculate a summary score for the system. Identify any issues.
Feedback to the system owner as appropriate.