SITUATION
A large, global technology company received a consent order from the Federal Trade Commission (FTC), which mandated that the company hire an independent, third-party assessor to conduct a biennial privacy and data protection assessment. The company engaged privacy experts at FTI Consulting to provide the assessment to the FTC.
OUR ROLE
The experts at FTI Consulting began by gaining an understanding of the Mandated Privacy Program in place, and then developing and executing the texting of the controls that mapped to the program. As an independent assessor, FTI Consulting examined the company’s privacy program, privacy risk assessment process, internal trainings, and the design and operating effectiveness of the company’s data protection controls.
OUR IMPACT
After completing the controls testing, FTI Consulting recorded the results of the tests, and prepared a comprehensive report to comply with the standards and expectations of the FTC. FTI Consulting delivered a written assessment of the client’s privacy program on time, as required by the consent order with the FTC.