# NIST Privacy Framework IDENTIFY Function Assessment

## Organisation: QuantumLeap Health Technologies
## Date: 2026-03-14

| Subcategory | Maturity | Score |
|-------------|----------|-------|
| ID.IM — Inventory and Mapping | Managed | 3.0/4.0 |
| ID.BE — Business Environment | Developing | 2.0/4.0 |
| ID.RA — Risk Assessment | Managed | 3.2/4.0 |
| ID.DE — Ecosystem Risk Management | Managed | 2.8/4.0 |
| **Overall** | **Managed** | **2.8/4.0** |

---

## Priority Actions

1. Complete data element inventory (ID.IM-P6) — currently partial, targeting Q2 2026 completion.
2. Establish interoperability framework for data exchange with research partners (ID.DE-P4) — planned for Q3 2026.
3. Align privacy programme priorities with updated business strategy (ID.BE-P2) — review scheduled for April 2026.