Merge pull request #194 from best-practice-and-impact/proportionality…

…_wording

Proportionality wording updates

proportionality.qmd

@@ -13,7 +13,7 @@ The draft currently has no official status. It is a work in progress and is subj
 
 # Proportionality
 
-All analysis shall be assured, and the assurance should be proportionate to the potential impact, size and complexity of the analysis. The level of assurance shall be guided by structured assessment of the business risks. 
+All analysis shall be assured, and the assurance should be proportionate to the potential impact, size and complexity of the analysis. The level of assurance should be guided by a structured assessment of the business risks. 
 
 The assurer and the analyst shall be independent. The degree of separation depends on many factors including the importance of the output, and the size and complexity of the analysis. This does not mean that the analyst should not undertake assurance, rather that there shall also be some formal independent assurance. 
 
@@ -34,7 +34,7 @@ Further detail and considerations may be found on the Data Quality Hub's [Qualit
 | Novelty of approach | A previously untried method requires more assurance. Confidence will grow as the technique is repeatedly tested. |
 | Reusing or repurposing existing work | Reusing work that was carried out previously may require validation and verification to confirm that original apporach - method, assumptions data etc. are still appropropriate for the new requirement|
 | Precision of the analysis outputs | Imprecise analysis can require different assurance than precise analysis, e.g. because of inherent limitations of the analytical technique, or lack of data on assumptions. |
-| Amount of resource available for the analysis and assurance | The value for money of any additional assurance must be balanced alongside the benefits and risk appetite that exists. Approaches that underpin a lot of different things may require greater levels of QA than might be suggested by any individual decision they support.  |
+| Amount of resource available for the analysis and assurance | The value for money of any additional assurance must be balanced alongside the benefits and risk appetite that exists.Analysis that is used for many purposes (e.g. population projections) may require greater levels of QA than might be suggested by any individual decision they support.  |
 | Longevity of the analysis | Ongoing analysis will require robust change control. |
 | Public impact | Analysis which will have a significant impact on the public may require more assurance than it otherwise would. |
 | Repeat runs for the same analysis | The focus for repeat analysis will be on version control and assurance of data and parameters for each run. |
@@ -139,6 +139,8 @@ In cases where there is a need for analysis, but there are also significant time
 
 : Table 3-3 - Responses to risk assessment levels {.striped}
 
+For further guidance on risk management, refer to the [Orange book](https://www.gov.uk/government/publications/orange-book) which covers risk management principles and risk control frameworks.
+
 ## Externally commissioned work
 
 Proportionate assurance of externally commissioned work is just as important as for internally produced analysis. For the commissioner, to use the work they should be fully informed of the business risk associated with it. This should be provided by an appropriate mix of documented risk assessments provided as part of the work, and by joint risk assessments planned throughout the life of the project. For commissioned work the options for mitigation will be similar to those for internal analysis.