Privacy and Data Protection, Part 2: Internal Auditors Views

The Internal Audit Foundation has released a new report in collaboration with Crowe: Privacy and Data Protection, Part 2: Internal Auditors’ Views on Risks, Responsibilities, and Opportunities.

This second report in a three-part series reveals a number of potentially valuable opportunities for internal auditors to take an earlier, proactive role in helping to recognize, manage, and mitigate these risks, while still fulfilling their role as defined by the International Professional Practices Framework.

Detailed examination of the results provided a number of insights that internal audit professionals can use to reflect on their own organizations’ preparedness and effectiveness in managing risks associated with privacy and data protection.

Key takeaways include:

• Data privacy roles and responsibilities
• Data privacy as a material risk
• Internal auditors’ views of program effectiveness
• Internal auditors’ most critical concerns
• How internal auditors can add value