Privacy assessments and investigations will provide an objective assurance and consulting activity designed to validate institutional privacy controls and improve the effectiveness of risk management, control and campus privacy processes, including:
- Focusing on key and emerging strategies and objectives of the university
- Demonstrating a balanced consultative role
- Helping management determine, implement and monitor risk mitigation activities which help achieve privacy strategies
- Reviewing campus unit privacy procedures to verify privacy protections are applied consistently to the collection and use of personal information
- Identifying and assessing risks to customer information and evaluating the effectiveness of current safeguards
- Designating and implementing a safeguard program that includes regular compliance monitoring and evaluation
Tactical Tools:
- Data Discovery
- Data Encryption
- Identity Management
- Data Loss Prevention (DLP)
- Privacy Impact Assessment (PIA)
- Risk Assessment
- General Controls/Privacy Assessments
