Audit of access to information and privacy / Internal Audit and Program Evaluation Directorate. : PS38-84/2017E-PDF

"The objective of the audit was to assess the adequacy of the ATIP management control framework: including the management of human resources; business processes; compliance with legislative timelines; and controls that mitigate the risk of disclosing exempted information. The audit examined: training and tools in place to support Agency staff in processing Access to information and Privacy Act (ATIP) requests; controls to manage ATIP requests; and continuous improvement activities related to the ATIP processes. The audit period covered April 1, 2013 to November 30, 2015 for the ATIP Management Control Framework. The audit period for testing a representative sample of both ATIA and PA requests was April 1, 2015 to September 30, 2015 which provides coverage of two fiscal quarters. Low risk areas identified in the planning phase are excluded from the audit. These include: compliance with legislation (with the exception of timeliness) and regulations; ATIP services provided to the Agency for publicly released CBSA products; and processes that do not directly relate to processing of ATIP requests, such as ATIP’s Information Sharing and Collaborative Arrangements Policy Unit"--Audit objectives and scope, p. [14-15].

Lien permanent pour cette publication :
publications.gc.ca/pub?id=9.844725&sl=1

• Format MARC XML
• Format MARC HTML

Demander des formats alternatifs