Norsk	English
Behandling av personopplysninger i Lifeness AS	Processing of personal data in Lifeness AS
Internkontroll Del III – Kontrollerende del
April 2020
Innholdsfortegnelse
1. Innledning 3
2. Håndtering av uønskede hendelser (avvik) 4
2.1 Avvikshåndtering 4
2.2 Når skal avvik meldes? 4
2.2.1 Eksempler på uautorisert utlevering 4
2.3 Hva skal en avviksmelding inneholde? 5
2.4 Hvordan melde avvik? 5
3. Egenkontroll 6
4. Ledelsens gjennomgang - informasjonssikkerhet 7
5. Vedlegg 8
5.1 Vedlegg 1; Avviksrapport 8
5.2 Vedlegg 2; Avvikshåndtering og egenkontroll 8	Internal control Part III – Controlling part
April 2020
Table of content[s

1. Introductio](https://docs.google.com/document/d/1YNW6qSh6lfh61wrx_hPzE3VgulXzM11y/edit#heading=h.1fob9te)n [3
2. Handling of unwanted incidents (deviation](https://docs.google.com/document/d/1YNW6qSh6lfh61wrx_hPzE3VgulXzM11y/edit#heading=h.3znysh7)s) 4 2.1 Deviation handling 4 2.2 When must deviations be reported? 4 2.2.1 Examples of unauthorized disclosure 4 2.3 What must a notice of deviation con[tain? 5 2.4 How to report deviations? 5
3. Self](https://docs.google.com/document/d/1YNW6qSh6lfh61wrx_hPzE3VgulXzM11y/edit#heading=h.2s8eyo1)-[control 6
4. Management's review - information](https://docs.google.com/document/d/1YNW6qSh6lfh61wrx_hPzE3VgulXzM11y/edit#heading=h.3rdcrjn) security 7 5. Appendix 8 5.1 Appendix 1; Deviation report 8 5.2 Appendix 2; Deviation management and self-monitoring 8 |