As a Public Body we are required to assess the impact of our activity. This document shows how the information about our workforce and the communities we serve guided our approach to protecting our information assets in line with the Social Security Scotland Security Strategy, and comply with all relevant legal, regulatory, and business requirements.