Monitoring, Audits & Continuous Improvement
The last workshop turns the programme into an ongoing cycle. Accountability means being able to show that data protection works: indicators, internal audits, corrective actions and an annual management review.
Workshop 13 video
Quick intro with a screen recording of the tasks — coming soon
What ResGuard provides
- Audit module with an online questionnaire for process owners and automatic reminders every 3 days until it is completed
- Data Protection Dashboard with compliance score and indicators
- Data protection report for management with one click
- Template for the management review and annual report
Workshop tasks
-
1. Define key indicators
Pick a few indicators: requests answered on time, data breaches, training rate, inventory activities reviewed and vendors assessed.
In ResGuard: Data Protection Dashboard -
2. Internal audit programme
Plan at least one audit per entity per year, with a defined scope and auditors independent of the area audited.
In ResGuard: Audit -
3. Carry out the internal audit
Check per area what has changed and whether processes work in practice: inventory, retention, vendors, policies, training and incidents.
In ResGuard: Audit -
4. Corrective actions
Turn every finding into an action with an owner and deadline, and check its effectiveness in the next audit.
In ResGuard: Objective Manager -
5. Management review
Once a year, present indicators, audits, incidents, legal changes and resources, and agree on next year's objectives.
In ResGuard: Policy Framework -
6. Workshop review & close-out
Review the results, attach evidence and close the objective in ResGuard.
In ResGuard: Objective Manager
What to keep in mind under the PDPA
- The PDPC can impose financial penalties of up to S$1 million, or 10% of annual turnover in Singapore for organisations with a turnover above S$10 million, whichever is higher.
- A documented programme, internal audits and corrective actions are taken into account by the PDPC when assessing a breach.
- Once the programme is running, the Data Protection Trustmark (DPTM) certification lets you demonstrate it to customers and partners.
Expected result
- Key indicators defined and communicated
- Audit programme approved and first audit completed
- Corrective actions tracked
- Management review and annual report completed
ResGuard modules: Audit, Data Protection Dashboard, Objective Manager