From the course: Certified Information Privacy Manager (CIPM) Cert Prep: 2 Privacy Program Framework

Unlock this course with a free trial

Join today to access over 23,500 courses taught by industry experts.

Program assurance

Program assurance

- [Narrator] Audits and assessments provide organizations with the opportunity to evaluate their privacy controls to ensure that those controls are functioning properly and that they're effectively protecting personal information. The goal of audits and assessments is to provide assurance that the organization is meeting its privacy obligations. They're similar in purpose and function. Both of them involve evaluating privacy controls, reporting on the effectiveness of those controls, and making recommendations for improvement. The main difference between audits and assessments lies in the purpose of the review. Assessments are generally performed by or requested by an organization's IT staff and audits are generally performed at the request of someone else, such as a regulator, executive, or board of directors. When an organization undergoes an audit the auditors follow a formal standard and they perform plan tests that are designed to determine how well the organization complies with…

Contents