RSK-0047Population & Housing Census Preparation — Phase 1
Confidentiality of individual census data under the statistics law
A risk's detail, response, contingency and residual risk.
Risk statement
From cause to event to impact — with the preventive controls before the event and the contingency after it
Cause
The pilot census questionnaires collect individual data on households and dwellings, and no policy yet sets how it is stored, for how long, and who may see it under the statistics law
Preventive controls
- A privacy impact assessment of the census data under the approved data-protection policy
- Encrypt the data on the tablets and in the government data centre
- Retention period and access rights approved by the Deputy President for Statistics
3 / 3
Event
Confidentiality of individual census data under the statistics law
A finding from the competent oversight body, or a complaint from counted households
Contingency
Publish aggregated results only for now, and destroy the paper forms once entered
Impact
Uploads from the tablets suspended or the storage platform reworked, delaying the pilot census results
Assessment
The level before and after the response
Inherent
Residual
Exposure
SYP 22.5M
Residual
56% off the score
Score trend
Last six months
- Score
- Target residual
Escalation path
Escalation engine: a high risk unreviewed for 10 days notifies the PM, 15 the programme manager, 20 the PMO director
Last reviewed 10 days ago · Outside the engine — below «high»
Project manager
Current levelAyman Sabbagh
Currently followed up here- 2
Programme manager
Eng. George Haddad
- 3
PMO director
Dr. Reem Al-Qabbani
- 4
Executive Council
Dr. Samer Al-Daqqar
By the PMO director’s decision
Mitigation plan
Each action with its owner and date — tick it off when complete
A privacy impact assessment of the census data under the approved data-protection policy
Eng. Hussam ZeidanEng. Hussam ZeidanDirector, CybersecurityP-026hussam.zeidan@psa.gov.syIn progressIn 23 days2026-11-20Encrypt the data on the tablets and in the government data centre
Eng. George HaddadEng. George HaddadDirector, Data Centres & Government NetworkP-024george.haddad@psa.gov.syNot startedIn 48 days2026-12-15Retention period and access rights approved by the Deputy President for Statistics
Mohammad Al-KhatibMohammad Al-KhatibDirector, Corporate Communication & PublishingP-050mohammad.alkhatib@psa.gov.syNot startedIn 74 days2027-01-10
Trigger
A finding from the competent oversight body, or a complaint from counted households
Contingency
Publish aggregated results only for now, and destroy the paper forms once entered