Southwark Pride fund 2024

Appendix 2: example risk assessment

Below is an example of a risk assessment.

Department:

 

Division/Business unit:

 

Assessment for:

Virtual Activities (including with Young People)

Involves staff delivering live virtual events online

Assessment date:

 

Assessors name/position/signature:

 

Review date:

 

Employee/Trade Union name/position/ signature

 

Findings communicated to employees/volunteers/sessional staff:

(Copy of method of communication e.g. minutes of meeting, tool box talk etc attached to risk assessment).

How Communicated: Email to all participants

When communicated:

 

Hazard

Who is at risk

What is done now

Risk level

What needs to be done

Target date

Revealing Names

Public

Setting by host at the outset of the meeting prevents the audience names appearing on screen.

Low

Monitor and maintain

 

Face to Face Visibility

Public

Setting by host at the outset of the meeting prevents audience face-to-face visibility.

The audience will be able to see the host.

Low

Monitor and maintain

 

Non Encrypted Data

Staff and  Public

Zoom Cloud content is encrypted by Zoom technicians.

Sessions set up for no recording

Low

Monitor and maintain

 

Insecure Meetings

Imposters

Zoom bombing

Staff and Public

Settings by host as follows:

The sessions are private and requires a password or private link to enter.

ID or Password are not shared on social media.

Switch off the ability for people to attend the session before the host.

Activate ‘waiting room’ feature and allow only those invited into the session.

The meeting is locked once those invited attend or after 10 minutes.

Do a role call by checking off from list to ensue all those invited are present.

Screen sharing is controlled by the media host.

Mute participants on entry

Private chat Off

Allow removed participants to re-join off

Removed participants can join future meetings if correctly booked

Meeting rules are the same as in physical meetings and are explained at the start of each meeting

Only those booked onto the session and pre-registered with the youth service will be allowed to attend.

Low

Monitor and maintain

 

Unsupervised Children

Children

Host ensures those attending the meeting are invitees only.

Host rejects names that are not on the official list to attend.

Low

Monitor and maintain

Personal Email

Staff

Register on Zoom with staff email only.

 

Monitor and Maintain

Unplanned Scheduling of live broadcast.

Staff and Public

Young people’s event Zoom hosts are Youth services staff.

Youth service to work with Comms regarding scheduling. 

Only trained staff to set up Zoom meetings               

Low

Monitor and maintain

GDPR

Public

GDPR message is sent to each participant

Low

Monitor and maintain

 

           

Page last updated: 03 April 2024

}

Privacy settings