<?xml version="1.0" encoding="UTF-8"?><marc:collection xmlns:marc="http://www.loc.gov/MARC21/slim">
  <marc:record>
    <marc:leader>00000nam  2200000za 4500</marc:leader>
    <marc:controlfield tag="001">9.844725</marc:controlfield>
    <marc:controlfield tag="003">CaOODSP</marc:controlfield>
    <marc:controlfield tag="005">20221205145138</marc:controlfield>
    <marc:controlfield tag="007">cr |||||||||||</marc:controlfield>
    <marc:controlfield tag="008">170928s2017    onc     ob   f000 0 eng d</marc:controlfield>
    <marc:datafield tag="040" ind1=" " ind2=" ">
      <marc:subfield code="a">CaOODSP</marc:subfield>
      <marc:subfield code="b">eng</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="043" ind1=" " ind2=" ">
      <marc:subfield code="a">n-cn---</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="086" ind1="1" ind2=" ">
      <marc:subfield code="a">PS38-84/2017E-PDF</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="245" ind1="0" ind2="0">
      <marc:subfield code="a">Audit of access to information and privacy </marc:subfield>
      <marc:subfield code="h">[electronic resource] / </marc:subfield>
      <marc:subfield code="c">Internal Audit and Program Evaluation Directorate.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="260" ind1=" " ind2=" ">
      <marc:subfield code="a">[Ottawa] : </marc:subfield>
      <marc:subfield code="b">Canada Border Services Agency, </marc:subfield>
      <marc:subfield code="c">[2017]</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="300" ind1=" " ind2=" ">
      <marc:subfield code="a">[19] p. (un-numbered pages)</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="500" ind1=" " ind2=" ">
      <marc:subfield code="a">"October 2016."</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="500" ind1=" " ind2=" ">
      <marc:subfield code="a">Title from caption.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="500" ind1=" " ind2=" ">
      <marc:subfield code="a">Issued also in French under title: Audit de l’accès à l’information et de la protection des renseignements personnels.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="504" ind1=" " ind2=" ">
      <marc:subfield code="a">Includes bibliographical references.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="520" ind1=" " ind2=" ">
      <marc:subfield code="a">"The objective of the audit was to assess the adequacy of the ATIP management control framework: including the management of human resources; business processes; compliance with legislative timelines; and controls that mitigate the risk of disclosing exempted information. The audit examined: training and tools in place to support Agency staff in processing Access to information and Privacy Act (ATIP) requests; controls to manage ATIP requests; and continuous improvement activities related to the ATIP processes. The audit period covered April 1, 2013 to November 30, 2015 for the ATIP Management Control Framework. The audit period for testing a representative sample of both ATIA and PA requests was April 1, 2015 to September 30, 2015 which provides coverage of two fiscal quarters. Low risk areas identified in the planning phase are excluded from the audit. These include: compliance with legislation (with the exception of timeliness) and regulations; ATIP services provided to the Agency for publicly released CBSA products; and processes that do not directly relate to processing of ATIP requests, such as ATIP’s Information Sharing and Collaborative Arrangements Policy Unit"--Audit objectives and scope, p. [14-15].</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="692" ind1="0" ind2="7">
      <marc:subfield code="2">gccst</marc:subfield>
      <marc:subfield code="a">Access to information</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="692" ind1="0" ind2="7">
      <marc:subfield code="2">gccst</marc:subfield>
      <marc:subfield code="a">Privacy</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="692" ind1="0" ind2="7">
      <marc:subfield code="2">gccst</marc:subfield>
      <marc:subfield code="a">Audit</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="710" ind1="2" ind2=" ">
      <marc:subfield code="a">Canada Border Services Agency. </marc:subfield>
      <marc:subfield code="b">Internal Audit and Program Evaluation Directorate.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="775" ind1="0" ind2="8">
      <marc:subfield code="t">Audit de l’accès à l’information et de la protection des renseignements personnels </marc:subfield>
      <marc:subfield code="w">(CaOODSP)9.844727</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="856" ind1="4" ind2="0">
      <marc:subfield code="q">PDF</marc:subfield>
      <marc:subfield code="s">90 KB</marc:subfield>
      <marc:subfield code="u">https://publications.gc.ca/collections/collection_2017/asfc-cbsa/PS38-84-2017-eng.pdf</marc:subfield>
    </marc:datafield>
  </marc:record>
</marc:collection>
