Lesson: Walkthrough of an Organization's Confidentiality and Privacy Procedures

In this lesson, Nick Palazzolo, CPA, walks through the vital topic of an organization's confidentiality and privacy procedures. Emphasizing a practical audit-like approach, he delves into critical areas such as IT risk management, HR, and training, demonstrating how to align actual practices with documented policy requirements. Nick provides a step-by-step exploration of the pre-walkthrough preparations, actual walkthrough, and how to assess various departments like IT, HR, and potentially the sales team for handling confidential information. He discusses evaluating encryption standards, access controls, network security measures, and the importance of SOC reports in audits. The lesson zeroes in on engaging with personnel to ensure compliance and training effectiveness, documenting findings accurately, and articulating actionable recommendations for tightening security and privacy protocols in corporate settings.