Compliance Audit
What is Compliance Audit?
An examination that evaluates whether an organization adheres to applicable laws, regulations, standards, and internal policies.
Terms that appear alongside compliance audit
Each of these is named in at least one of the same controls as compliance audit. The number is how many controls name both.
- compliance 12 shared controls
- audit 12 shared controls
- due diligence 4 shared controls
- data protection 4 shared controls
- cybersecurity 4 shared controls
- internal audit 4 shared controls
- joint controllers 3 shared controls
- gdpr 3 shared controls
Frameworks that govern compliance audit
What the standards actually require on compliance audit
Requirements naming compliance audit across 6 standards, quoted from the control text.
The owner or operator must certify that it has evaluated compliance with Subpart D at least every three years, the audit conducted by at least one person knowledgeable in the process, with a report of findings, a prompt documented response to each finding and...
epa-risk-management-program-40-cfr-part-68::68.79 · § 68.79 Compliance audits →A processor must regularly conduct compliance audits of its personal information processing against laws and administrative regulations;
china-personal-information-protection-law-pipl::54 · Art. 54 Regular compliance audits →Anyone may report an alleged Code breach to the Code Governance Committee, an independent body of a consumer representative, an industry representative and an independent chair, whose charter sets its functions and which may outsource monitoring, reporting and...
australia-general-insurance-code-of-practice-2020-code-as-updated::gicop-p13-164-178-cgc-sanctions · Submit to Code Governance Committee monitoring and enforcement: respond to allegations within ten business days, accept corrective measures, sanctions including compliance audits, corrective advertising, compensation, publication and community benefit payments up to one hundred thousand dollars, and reporting to ASIC →Operate third-party + supply chain risk + awareness training + physical security + compliance audit per Oman framework. Third-party risk must apply NIST SP 800-161 SCRM tailored to Oman context including vendor qualification + contract requirements + ongoing m...
OMANCS-8 · Third-Party + Supply Chain Risk, Awareness Training, Physical Security, Compliance Audit →At least every 2 years (or more often if directed) the owner must have an approved or appointed auditor audit the CII's compliance with the Act, prescribed technical or other standards, and applicable codes and standards of performance;
singapore-cybersecurity-act-2018::S15 · Biennial compliance audit, annual risk assessment and reports within 30 days →The processor uses third-party certifications or other risk assessments at appropriate intervals, adjusts its safeguards to their results and implements the recommendations of any privacy compliance audits.
global-cross-border-privacy-rules-global-cbpr-forum::PRP.8 · Global PRP requirement 8: third-party certifications or risk assessments →Questions people ask about compliance audit
What is Compliance Audit?
Why is Compliance Audit important for compliance?
Which compliance frameworks address Compliance Audit?
Where can I learn more about Compliance Audit?
See how Compliance Audit applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.