Data Protection · glossary

Audit

A check of how the supplier handles the data, by the customer or an auditor it appoints. Corrandale first relies on Tennerby’s yearly security report. It may then audit once a year on 30 days’ notice, and again after a breach or an ICO request. Agreement, clause 11.3 · Chapter 4

Explained in Chapter 4, Negotiating a Data Processing Agreement (Article 28), of Data Protection.

How it comes up, in Chapter 4
An audit is a check of how the supplier handles the data, by the customer or an auditor it appoints. Each audit takes Tennerby’s small team away from the app, and every customer could ask for one. So clause 11 starts with a yearly independent security report. Corrandale relies on that first, and audits only on what the report does not answer.
Read Chapter 4, Negotiating a Data Processing Agreement (Article 28) →

Chapter 1 and this glossary are open to everyone; the whole edition is free to read with a free account until 31 January, and it stays open to an account opened by then.

Related terms

Where this term lives

This term is part of one fictional software supplier's year, with every document attached and a test after every chapter. Open Data Protection → · All terms A–Z →