Re: risk assessment - non electronic data

[martlaberge () hotmail com]

You should consider the entire lifecycle of your "non electronic data" (creation, conservation, destruction).  How are 
they produced? Who as access to them? Access or printing logs? What's the disposal procedure?

Hope that helps you with your assessment.