Case 1

You are working for a new company that is primarily an internet-based seller of goods whose business model is similar to eBays. The company was founded on principles similar to eBays and is an online auction business, but it has the added benefit of having one common site that deals with customers worldwide. The CEO knows that privacy is very important in the online business and has requested that the internal audit function draft a best practices privacy policy for customers because the motto for the new company is Your Privacy is Our Policy. The company neither has, nor plans to hire, a privacy or compliance officer. The CEO expects the CAE to lead this effort and ensure the campaign delivers on the companys motto. With the advertising campaign slated to launch in one month, the CEO wants the privacy documentation finalized as soon as possible.

1. Identify key sources on privacy that are available for you to reference as you define best practices.
2. Determine the consulting engagement steps you would take and the areas of the company from which you would ask representatives to participate in the project.
3. Identify the consulting engagement documentation you would prepare and the information you would present to the CEO.