A ‘data access and authorisation plan’ determines who has access to what data and under what conditions, to ensure privacy. Unauthorised access and security breaches should be monitored and appropriate actions should be taken to prevent any recurrence of breaches.

Reference Doc: Revised EIF