Audit and Gap Assessments

Your organisation may have invested heavily in data protection compliance, but is it delivering? Are you struggling to communicate your compliance status to new or prospective customers? Are you looking at M&A activity and need to undergo due diligence? Have you lost customers because you can’t present the right controls to satisfy due diligence?

If the answer is yes to any of these questions, then it’s time to step back, take stock and undertake an audit to help identify your company’s strengths and weaknesses.

Our Approach

We start by talking to you about your compliance programme and getting to know and understand your business and its risk profile. We want to understand why you are undertaking an assessment and what outcomes you want to achieve. This helps us to scope the audit/assessment and adapt it to best fit your needs.

We like to understand where your data protection risks lie and in which areas you need your compliance programme to reach higher standards of maturity. Based on your input we will suggest an appropriate scope for your audit.

Audit Options

•        Structured desk-based audit — modelled on the ICO audit methodology, providing a focused assessment of key compliance areas.

•        Fort Privacy Maturity Model Audit — a more in-depth audit examining five levels of maturity for a data protection programme, from ad hoc to optimised, across the 10 categories of our Compliance Framework.

What You Get

Fort Privacy auditors have the right combination of data protection and audit skills to evaluate interview responses and evidence to accurately assess your compliance programme. On completion, we provide:

•        An initial assessment of key findings

•        A detailed audit report identifying any gaps

•        A defined list of actions to close any gaps identified

•        A closing meeting with the board and management team to review findings

•        Realistic, measurable compliance targets based on your business needs and risk profile