Content area
Full Text
MANAGING AND AUDITING PRIVACY RISKS: GLOBAL TECHNOLOGY AUDIT GUIDE (GTAG) NO. 5 Ulrich Hahn, Ken Askelson, and Robert Stiles, Altamonte Springs, FL: The Institute of Internal Auditors, 2006, 40 pages.
Managing and Auditing Privacy Risks is the fifth entry in the IIA series of concise pronouncements on IT subjects issued on a joint-venture basis with other professional bodies and academic institutions. The subject it covers is a critically important issue for all organizations-the management of privacy risks and the assurance that those risks are being controlled appropriately. The work focuses on management actions as well as the roles that can and should be played by internal auditors.
As with the other GTAG publications, this one contains a brief executive summary for the chief audit executive (CAE), followed by a detailed discussion of the topic and an extensive listing of other relevant resources in an appendix. The document contains guidance for public-sector and not-for-profit organizations as well as for-profit businesses.
The series of security breaches in several large and prominent organizations that have...