Privacy Officers engage ERE information security and privacy auditors to conduct threat risk analysis and privacy impact analysis as an assurance step for their privacy compliance needs.

Differentiators of ERE Privacy Compliance Auditors

• Provide by the text book internet privacy audits, TRA, and PIA services, cross indexed to requirements in the privacy standard of the client’s choice.
• Minimize cost and confusion by aligning scope precisely with the client’s business needs or control points mandated by their third party auditors.
• Correlate IT security technology risks with privacy compliance requirements specified by the client’s privacy standard of choice.
• Utilize components of several standards that best meet a client’s business requirements, such as components of: PIPEDA audits, RCMP / CSE TRA, and our experience with best practice borrowed from other ERE Internet privacy audits.
• Clear, precise identification of: evidence of compliance violations, compliance violations, risk triaged by risk, and mitigation steps.
• The Internet privacy audit report contains an actual PIA in the form of a pro-forma PIA analysis. ERE populates the template with compliance violations identified by the TRA and we provide a methodology / algorithm to calculate the cost of potential impacts or the PIA.
• Each PIA is prefaced with an executive summary that describes the key risks in terms of compliance violations, our methodology, and leads directly into the PIA pro forma calculation template.
• Scope and price of each step are presented in a clear, simple price quotation.
• Costs and scope are tuned to meet the business requirements and budget for each client.

As text book privacy compliance auditors our PIA results focus on the audit control points specified in privacy regulations / standards:

• Internet Privacy Audits – Identify compliance to any of the privacy standards / regulations below correlated with a technical security assessment of the underlying host network.
• California Identity Theft Law SB 1386.
• PIPEDA audits – checklist of 10 critical elements, policy, standard operating procedures, technology.
• RCMP / CSE TRA – checklist of 10 critical elements, policy, standard operating procedures, technology.
• PIPEDA Audits and RCMP / CSE TRA correlation – simplified best of both standards
• PHIPA.
• FIPPA.
• GLB.
• HIPAA.