Outputs
The output is an updated profile with five entries: the reference set, the order of importance, the type, the attributes, and the protected attributes with their rationale.
What clause 6.3 asks
Five entries go into the profile. The first is the full set of stakeholders. The second places them in order of importance to the organization. The third records whether each is affected, influential or both. The fourth lists their attributes. The fifth names the attributes that carry legal or cultural protection, with the reason. The set is versioned because later work must name the version it used.
Why it matters
The five entries are a compact data model, and each one has a later use. The reference set is the population for the data map. The order of importance decides where the team spends its effort. The type decides whether a stakeholder belongs in the internal risk inventory or the external impact inventory in clause 8. The attributes are the basis for the groups. The protected attributes carry the legal and cultural weight and can require a different procedure in later steps.
What good looks like
Build the five entries as separate fields, not as a paragraph. Give the reference set a version number, because the data map will name the version it used. Record the order of importance with the reason, not just a rank. Record the type for every stakeholder, including those that are both. Keep the protected attribute rationale beside the attribute, so a later reader does not have to reconstruct it.
Evidence an assessor asks for
The assessor will use the reference set as the population for the data map. A set that is not versioned cannot be tied to the data version that was tested.
- Reference set The full stakeholder set, versioned
- Order of importance The order and the reason for it
- Stakeholder type Impacting, impacted or both, for every entry
- Attribute record The inherent and context attributes, with the protected attributes and their rationale
Where it commonly fails
- The reference set changes without a version
- The order of importance is alphabetical
- Protected attributes are listed with no rationale or legal basis
What to do before publication
Create the five fields before the data work starts. The data lead should be able to open the reference set and see exactly which groups must be represented.