Plan, conduct and document data protection audits in a structured manner. Use pre-built catalogs – the included preeco Audit Catalog Data Protection, plus optional BSI IT-Grundschutz, CISIS12 and VdA ISA for German specialist standards – or create your own questionnaires. Results are traceable at all times and exportable.
Data Protection Audits
Conduct data protection audits in a structured manner and document the results traceably. The system guides you through the entire audit process – from planning through execution to follow-up. All results are traceable at all times and exportable as PDF or DOCX.
Audit Catalogs
Access pre-built and individually customizable questionnaires as a basis for your audits. The catalogs are structured, reusable and deployable across tenants. Alternatively, create your own questionnaires for your specific requirements.
Checklists
Use multiple-choice questionnaires and checklists for structured audit execution. Assign audits specifically to individual users or user groups. The permission concept separates between answering and managing audits.
Follow-Up
Create comprehensive audit reports with all questions, answers and comments in a professional layout. Identify compliance gaps and create tasks directly from audit results. Reminders prompt you for regular follow-up audits.
FAQ
The preeco data protection audit catalog is included. Ready-to-use catalogs for audits under BSI IT-Grundschutz, CISIS12 and VdA ISA are available as optional, chargeable add-ons. You can also create your own audit catalogs for requirements that no supplied catalog covers, such as internal policies or audits of service providers. All catalogs can be reused and applied across several organizations.
An audit catalog consists of checklists. You define each checklist from requirements, their applicability and the related threats. This lets you capture your own audit criteria in a structured way instead of working with loose questionnaires. The finished catalog then serves as the basis for as many audits as you need, and in each audit you assign the checklists to the matching audit objects.
You create the audit objects hierarchically, each with a type and applicability, and link them to existing assets from your data processing systems. You then assign the checklists from the catalog to the audit objects. For each requirement you record the implementation status, the people interviewed and notes on implementation. Open points are assigned to users as tasks, so your team works together in one shared audit.
The application shows audit progress graphically and aggregates it on the parent elements. You therefore see not only how far individual audit objects have got, but also the status of whole areas. You can download the current status as PDF or DOCX at any time, including the graphical progress view, for example as an interim report for management.
For requirements that have not yet been implemented, you create tasks and assign them to the people responsible; they are notified by email and see their open tasks on their dashboard. Follow-up reminders let you schedule repeat audits, and you are reminded at the date you set. Comments and file attachments keep the evidence directly on the audit.
Yes. Within one team you manage several organizations, such as subsidiaries, sites or clients, and switch quickly between them. Audit catalogs are reusable, so you can apply the same catalog to each organization and document the results separately. This is particularly useful for external data protection officers and groups of companies that audit against the same standard on a regular basis.
We'll show you how preeco | data protection makes your data protection audits structured and efficient.