CASE 1 You are working for a new company that is primarily an internet-based seller of goods whose business model is similar to eBay's . The company was founded on princi- ples similar to eBay's and is an online auction business , but it has the added benefit of having one common site that deals with customers worldwide . The CEO knows that privacy is very important in the online business and has requested that the internal audit function draft a best practices privacy policy for customers because the motto for the new company is "Your Privacy is Our Pol- icy . " The company neither has , nor plans to hire , a pri- vacy or compliance officer . The CEO expects the CAE to lead this effort and ensure the campaign delivers on the company's motto . With the advertising campaign slated to launch in one month , the CEO wants the privacy doc- umentation finalized as soon as possible .

A. Identify key sources on privacy that are available for you to reference as you define best practices .

B. Determine the consulting engagement steps you would take and the areas of the company from which you would ask representatives to participate in the project .

C. Identify the consulting engagement documentation you would prepare and the information you would present to the CEO .