The SAVVI Concept Model defines ‘Purpose’ as
The ‘Purpose’ is not the Vulnerability(s) itself. ‘Purpose’ should be a recognised function of the Lead Organisation, that gives it the remit to address a set of Vulnerabilities. This ‘Purpose’ will become important when requesting data, that was originally collected for another purpose, to be reused for this new Purpose.
It is important to establish the Purpose at this early stage as much of the Information Governance will be founded on it. Avoid being vague as those that you will want to ask for data from, will expect clarity as to what their data is to be used for.
Examples of Purpose include
… so long as they can be linked to a power or duty that gives a remit for the work.
The 'Purpose Definition' that is output from this step should be usable by others who want to run a similar initiative, so avoid describing the local context for the initiative in this step.
Steps