# PIIA (SA) — Mitigation Measures

> Draft the mitigation measures for a POPIA PIIA: safeguards, security measures, and technical/organisational controls to address identified risks.



Tags: South Africa, POPIA, PIIA, DPIA, Mitigation, Security safeguards


## Example Prompts

- Draft the mitigation measures for our PIIA
- Document safeguards and controls for each risk in the impact assessment
- Write the security and organisational measures to address PIIA risks

URL: https://rakenne.app/skills/piia-sa-mitigation-measures/index.md

Try this skill: https://rakenne.app/a/?skill=piia-sa-mitigation-measures



## Overview

Draft the mitigation measures for a POPIA PIIA: safeguards, security measures, and technical/organisational controls to address identified risks.

## Getting Started

Add your source materials to the project workspace, then activate the *PIIA (SA) — Mitigation Measures* skill. The agent will guide you through the process step by step.

## Example conversation

**You:** We have the risk register from the PIIA—now we need the mitigation measures for each risk.

**Agent:** I’ll draft the mitigation section. For each risk in your register I’ll assign concrete measures: technical (e.g. encryption, access controls, logging), organisational (policies, training, DPAs), and any physical or process controls. I’ll keep them specific so they’re auditable and so we can assess residual risk for sign-off.

## Output excerpt

| Risk | Mitigation measures                                                                 | Owner    |
|------|--------------------------------------------------------------------------------------|----------|
| R1   | Encryption at rest (AES-256); role-based access; MFA for payroll system; audit log of access; annual access review. | IT / HR  |
| R2   | Data quality checks on input; annual data review; process for corrections and subject requests.                       | HR       |
| R3   | DPA with payroll/processor; contract clauses on confidentiality, security and sub-processors; no transfer outside SA without Regulator alignment. | Legal   |

Existing controls are in place for R1 and R2; R3 DPA is under review and will be updated by [date].


---

Back to [Skill Library](https://rakenne.app/skills/index.md)