unified

UC-AUDIT-08 — Protect confidential information obtained in audit work

Internal auditors use information obtained during their work only for legitimate professional purposes and in conformance with applicable laws, regulations, and organizational policies. Information is protected against unauthorized access, use, or disclosure during and after engagements, and confidentiality obligations extend to parties assisting the internal audit function. Confidentiality acknowledgments and access controls over audit files evidence operation.

Record JSON · Open in map · Data retrieval guide

Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.

Attributes

domain
Compliance, Audit & Assurance
type
preventive
category
administrative

Details

unified_id
UC-AUDIT-08
title
Protect confidential information obtained in audit work
statement
Internal auditors use information obtained during their work only for legitimate professional purposes and in conformance with applicable laws, regulations, and organizational policies. Information is protected against unauthorized access, use, or disclosure during and after engagements, and confidentiality obligations extend to parties assisting the internal audit function. Confidentiality acknowledgments and access controls over audit files evidence operation.
domain
Compliance, Audit & Assurance
control_type
preventive
control_category
administrative
members
  • framework
    iia-2024
    control_id
    Principle 5
    coverage
    full
    relationship
    superset_of
  • framework
    iia-2024
    control_id
    Std 5.1
    coverage
    full
    relationship
    superset_of
  • framework
    iia-2024
    control_id
    Std 5.2
    coverage
    full
    relationship
    superset_of
guidance

    Source

    No record-specific source URL is provided.

    Connections