Âé¶¹ÊÓÆµ

Skip to main content

Internal Audit of Âé¶¹ÊÓÆµ Cooperating Partners Digital and Data Processing Risks - August 2023

As part of its annual workplan, the Office of Internal Audit audited Âé¶¹ÊÓÆµ cooperating partners¡¯ digital and data processing risks. The audit focused on the adequacy, efficiency and effectiveness of Âé¶¹ÊÓÆµ governance, risk management and internal controls to mitigate cooperating partners¡¯ digital and data processing risks. Âé¶¹ÊÓÆµ routinely relies on its cooperating partners¡¯ processes and technology to process and safeguard beneficiaries¡¯ personally identifiable information. Âé¶¹ÊÓÆµ¡¯s cooperating partners process a large amount of personally identifiable information, including current and prospective beneficiaries' personal data. Protecting this information is a fundamental duty of care to those Âé¶¹ÊÓÆµ serves. Therefore, it is incumbent on Âé¶¹ÊÓÆµ to ensure beneficiaries' privacy rights and personal data are safeguarded and processed by its cooperating partners in a manner that does not compromise its confidentiality, availability and integrity. Breaches in privacy could have profound consequences for individual beneficiaries or beneficiary communities and impact Âé¶¹ÊÓÆµ's mission objectives. Based on the results of the audit, the Office of Internal Audit has come to an overall conclusion of major improvement needed.