Guide 5: Managing and Auditing Privacy Risks
One of the many challenging and formidable risk management issues faced by organizations today is protecting the privacy of customers' and employees' personal information. The cost from privacy breaches is increasing everyday. The organization's customers, suppliers, and business partners want assurances that the personal information collected from them is protected and used only for the purposes for which it was originally collected.

Managing and Auditing Privacy Risks is intended to provide the chief audit executive (CAE), internal auditors, and management with insight into privacy risks that the organization should address when it collects, uses, retains, or discloses personal information. This guide provides an overview of key privacy frameworks which help to understand the basic concepts and aid in finding the right sources for more guidance regarding expectations and what works well in a variety of environments. It also covers the details on how internal auditors complete privacy assessments.

Authors
Ulrich Hahn, Ph.D., Switzerland/Germany
Ken Askelson, JCPenney, USA
Robert Stiles, Texas Guaranteed (TG), USA

Download this guide (PDF 752KB).
Purchase printed version.
Download GTAG 5 PowerPoint slides (PPT).
Download form for permission to translate to another language (Word, 95KB).