# Address security and privacy risks
<a name="address-security-and-privacy-risks"></a>

 The privacy requirements of government services can be extremely strict. Take a balanced approach to managing risk by implementing appropriate privacy and security measures, and by understanding the real impact of the system on the people, communities, and businesses affected. Support a security culture where security measures are frictionless for service operations, and do not place additional burden on users. This includes responsible, accountable and auditable stewardship of government data and systems.  

 **Questions to ask:**  
+  How can you demonstrate and monitor for security in your system or service? 
+  How can you demonstrate compliance to and stewardship of privacy for all data and systems? 
+  What are the jurisdictional requirements around identity, including identity frameworks, data sharing legislation, privacy impact assessments, and so on?