We have a busy programme of work and provide expert advice to all kinds of organisations from councils, NHS bodies and large Government departments to charities, finance companies and some of the biggest names in business.
Firstly our Audit Managers identify and talk to organisations that we feel would benefit from one of our audits. They then meet with the client to plan, schedule and scope out the audit, taking into consideration such aspects as governance, personal data, training, IT security and records management.
A team of two or three Lead Auditors will then review the client information that is sent to us before spending time at the client site. Here they will talk to people at every level to review the organisation's data protection policies and procedures, and see how their processes work first hand.
Once the audit is complete, we put together a comprehensive report that makes recommendations and outlines areas where senior managers can improve data protection practices. A summary of the report is then published on the ICO website for all to see. You can read some of our executive summaries here.