Privacy and Security Auditing and Assessment

The effectiveness of any policy can only be judged by measurable objectives and you will only really know if your policies are effective if they are measured and judges at regular intervals. This is where policy auditing comes into play.

My privacy and security auditing services offer you an unbiased objective review of your privacy and/or security policies and procedures. Are policies and procedures in place? Do your employees know about them? What sort of contingency plans are in place and have they been tested?

A privacy and security audit consists of my having access to relevant documents and materials and short interviews with employees that I select. The employees usually selected for this process are those directly related, such as your privacy officer and chief information officer (or your business equivalent) as well as a representative selection of other employees.

All employee responses are given and used by me in a confidential and anonymous format and the employees selected are informed of this. This is to encourage employees to help identify potential short-falls or problem areas in the existing policies and procedures without being concerned with the assignment of blame. The purpose of the audit, which the employees are also informed about, is to ensure that your privacy and security policies and procedures are effective, which is good for your company, and thus good for your employees.

The deliverable for this type of service is report which outlines what was found during the audit, makes recommendations on what changes or future planning should take place and also clearly identifies any and all areas of concern or weakness that exist and what steps can be taken to correct them. When I am finished you will have a realistic assessment of the policies and procedures regarding security and privacy that are outlined and implemented for your business. You will know just how effective these policies and procedures are and what steps you can take to improve their effectiveness.