Monitoring, Audits & Continuous Improvement
The last workshop turns the programme into an ongoing cycle. Accountability means being able to show that data protection works: indicators, internal audits, corrective actions and an annual management review.
Workshop 13 video
Walkthrough of the workshop and its tasks — coming soon
Workshop tasks
-
1. Define key indicators
Pick a few indicators: requests answered on time, incidents, training rate, RoPA activities reviewed and vendors assessed.
In ResGuard: Data Protection Dashboard -
2. Internal audit programme
Plan at least one audit per entity per year, with a defined scope and auditors independent of the area audited.
In ResGuard: Audit -
3. Carry out the internal audit
Check per area what has changed and whether processes work in practice: RoPA, retention, vendors, policies, training and incidents.
In ResGuard: Audit -
4. Corrective actions
Turn every finding into an action with an owner and deadline, and check its effectiveness in the next audit.
In ResGuard: Objective Manager -
5. Management review
Once a year, present indicators, audits, incidents, legal changes and resources, and agree on next year's objectives.
In ResGuard: Policy Framework -
6. Workshop review & close-out
Review the results, attach evidence and close the objective in ResGuard.
In ResGuard: Objective Manager
What to keep in mind in Peru
- The ANPDP can carry out inspections and impose fines of up to 100 UIT depending on the severity of the infringement.
- A documented internal audit and action plan demonstrate diligence during an inspection.
Expected result
- Key indicators defined and communicated
- Audit programme approved and first audit completed
- Corrective actions tracked
- Management review and annual report completed
ResGuard modules: Audit, Data Protection Dashboard, Objective Manager