O3.5 Enable third-party audits

Principle

O3 Ensure data privacy by design

Risks

RS1 Privacy vulnerability

Life Cycle Stage

L5 Operations and Maintainance

Practices

• Implement third-party audits using best practices from established privacy frameworks such as LINDDUN and NIST to identify and mitigate privacy risks effectively.

• Ensure that third-party auditors assess systems against principles

LINDDUN (N/d). A Framework for Privacy Threat Modelling.