Adoption questions.
WHAT WILL IT ACCESS
Data Accounts Systems
WHAT PERMISSIONS DOES IT REQUEST
Are they proportionate to its function?
WHO PROVIDES IT
Established? Maintained? Contactable?
WHERE WILL DATA BE HELD
And under what terms?
HOW DO YOU GET YOUR DATA OUT
Establish this before adopting, not when leaving.
WHAT HAPPENS IF THEY ARE BREACHED
Do they have a notification process?
WHAT HAPPENS IF YOU STOP PAYING
Is your data retained, returned, or lost?
WHO WILL ADMINISTER IT
And what happens when that person leaves?
DOES IT SUPPORT INDIVIDUAL ACCOUNTS
And a second authentication step?
WHAT DOES IT REPLACE
And will you actually remove the old thing?
WHAT TO DIARISE
An annual review of whether you still use it.
WHAT TO AVOID
Adopting faster than you can administer.
