As an assessment body, our responsibilities include but not limited to:
Briefing applicants about the assessment process for the DPTM certification scheme
Relevant personnel from TÜV SÜD will walk the applicant through the entire application and certification process. This will facilitate applicant to understand the journey to achieve certification.
Determining the scope of assessment
Various details pertaining to the organisation will be collected as a reference for assessor to determine the audit scope.
Conducting a desktop review of the documents/evidence provided by the applicant
- To effectively conduct the audit, there will be two stages of assessment: offsite documentation assessment & onsite certification assessment.
- Offsite assessment checks applicant’s documentation (e.g. policy, manual & procedure) to identify any lapses/gaps which may hinder the onsite assessment.
Carrying out an onsite assessment to identify gaps which organisations should address
- Upon resolving the identified findings from offsite assessment, a scheduled onsite assessment will further verify the effectiveness of the system implementation by reviewing evidences, in sampling approach, that support what has been drafted in organisation’s policy, manual and procedure.
- Gaps identified during the onsite assessment will require further remediation from applicant. Evidences will be required by assessor to close the findings.
Preparing an assessment report with our findings and recommendations to PDPC
After the remediation period, assessors will compile all information and make a final recommendation to PDPC for their certificate issuance decision.
In an ever-changing technology landscape, the need to recognise the importance of protecting a company’s data is paramount. Today, consumers care more about data protection with the increasing scale of data breaches and hacks. To gain consumer confidence and trust, organisations now need to look at how it can better protect customers' data especially in relatively new areas like machine and artificial intelligence.