ICO Assurance Rating Scale
High Assurance. There is a high level of assurance that processes and procedures are in place and delivering personal information protection compliance. The audit has identified only limited scope for improvement in existing arrangements and as such it is not anticipated that significant further action is required to reduce the risk of non-compliance with the POPI Act.
Reasonable Assurance. There is a reasonable level of assurance that processes and procedures are in place and delivering personal information protection compliance. The audit has identified some scope for improvement in existing arrangements to reduce the risk of non-compliance with the POPI Act.
Limited Assurance . There is a limited level of assurance that processes and procedures are in place and delivering personal information protection compliance. The audit has identified considerable scope for improvement in existing arrangements to reduce the risk of non-compliance with the POPI Act.
Very Limited Assurance. There is a very limited level of assurance that processes and procedures are in place and are delivering personal information protection compliance. The audit has identified a substantial risk that the objective of personal information protection compliance will not be achieved. Immediate action is required to improve the control environment.
Not applicable. This does not apply due to any one of a number of factors related to the nature of the organisation and its activities.