Skip navigation Spacer Spacer Spacer
Data Protection Logo Spacer Guide to Data Protection Auditing

Data Protection Homepage  Bullet  
Audit Guide Homepage  Bullet  
Download print version  Bullet  

What is a Data Protection Audit? Why Audit? Beginner's guide Step-by-step Process Forms and Checklists Site Map

SpacerPlanning | Preparation: Conducting the Adequacy Audit | Preparation: Compliance Audit | Conducting the Compliance Audit | Audit Execution | Reporting | Audit follow-up

Spacer Spacer

< Previous | Next >
 

Spacer
Spacer

Positive Auditing (print ref: Part 3, Section 3.3.4)

When recording observations on checklists during an Audit it is important to list everything that has been examined and not just those areas where problems or Non-compliances were noted. This is called "Positive Auditing" and is meant to give a balanced view of the whole Audit rather than just focussing on errors. For example, if five documents are examined and an error is noted on one of them, record the reference numbers of the four good documents as well as the one with the error. This practice will make the task of writing the Compliance Audit Reports much easier at the end of the Audit and will avoid giving an unfairly negative impression.

Toolbox top border
Spacer

Audit Execution

Spacer
Spacer
Toolbox bottom border


< Previous | Next >

Spacer
Spacer