QuestionQ263

Privacy Operational Lifecycle: Assess

The CEO is pleased with the company’s improved privacy program but seeks added assurance that it fully complies with industry standards and incorporates emerging best practices. What would best help achieve this objective?

  • A An external audit conducted by a panel of industry experts
  • B An internal audit team accountable to upper management
  • C Creation of a self-certification framework based on company policies
  • D Revision of the strategic plan to provide a system of technical controls
Explanation

An independent external audit by industry experts provides an impartial evaluation of compliance against recognized standards and identifies gaps relative to current best practices. Independent assessors improve the credibility and objectivity of assessment results; internal oversight, self-certification, and a technical-control plan do not provide the same independent validation.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!