Compliance Audits

You have completed your information and privacy risk assessment, put required compliance documentation in place, and instituted an ongoing employee education program. What next?

Now its time to measure how successful your privacy best practices program implementation is.  You must make sure that privacy best practices are being followed and that every employee who is responsible for handling sensitive information is performing exactly what the privacy policy best practices say you are doing. This is the “Review Stage” of the Plan, Do, Review, Improve Cycle.  It is the compliance audit.

The compliance audit is the glue that holds your privacy best practices program together. Compliance audits should be frequent, if not daily in a smaller workplace. In addition, an annual compliance audit is often performed by a third-party professional.

---

Add this page to your favorite Social Bookmarking websites