# DRAFT — Board data-risk discussion

DataGovernance.ca original planning worksheet. Not legal advice, certification or a completed review.
Keep sensitive information in an approved internal environment.

## 1. Critical decisions and datasets

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 2. Accountability for meaning and permission

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 3. Important vendors and system dependencies

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 4. Observed versus reported control evidence

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 5. Unresolved decisions and exceptions

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 6. Specialist assurance needed

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

## 7. Agreed action, owner and next evidence

Evidence or decision owner: [to confirm]
Notes and uncertainties: [complete internally]

Approval status: NOT APPROVED
Next review: To confirm