Assessments

Whatever the reason for needing an assessment, Navigate works closely with clients to provide an assessment that specifically meets their needs. Through on-site and remote interviews, document reviews, observation and testing we get to know each client, their industry, company, risk tolerance and culture so assessment results and recommendations are specific, actionable and value added.

We regularly perform assessments against the following laws and frameworks:

  • NIST privacy framework
  • AICPA Privacy Management Framework (PMF)
  • General Data Protection Regulation (GDPR)
  • California Consumer Privacy Act (CCPA) and other U.S. State Privacy Laws
  • EU AI Act
  • Asia Pacific Economic Cooperation Cross Border Privacy Rules (APEC CBPR)
  • Health Insurance Portability and Accountability Act (HIPAA)
  • ISO 27001/27002 Security Framework
  • NIST Cybersecurity Framework (CSF)

It is not uncommon for some clients to need assistance documenting data flows as part of the assessment process. We have extensive experience in creating data flows/maps for clients that need a more thorough understanding of their information lifecycles.

Improvement Planning and Management

An assessment generally results in findings and recommendations that essentially defines “what” needs to be accomplished to achieve compliance or meet improvement goals. One size does not fit all when it comes to implementing solutions for a client–at Navigate we understand that what works for one company may not work for another. A company’s size, industry, resources, relative maturity and culture all factor in to what we recommend and develop for a client. The next step is to define “how” the recommendations can be implemented. Creating a program and project plan requires thoughtful consideration of the various alternatives for implementing a recommendation that will close a compliance gap or improve the current state in the most efficient and cost-effective manner and with minimal disruption to the business.

Individual projects must also work in unison with the current business environment. We focus not just on individual projects but ensure a program plan is constructed as well to deliver results that provide the overall desired end state for the organization. We have extensive experience creating actionable project plans for clients. For some clients, we also serve as the overall program manager for execution of the project plans to help ensure tasks and projects are completed on-time and on-budget, status is periodically reported to ensure accountability, and any execution issues are promptly identified and addressed.

We regularly work with our clients to design, create, and implement improvements in areas such as:

  • Strategy/Roadmap
  • Policies and  Procedures
  • Training and Awareness
  • AI Governance
  • Risk Management
  • Information and Privacy Governance
  • Privacy by Design
  • Vendor Management
  • Ongoing Monitoring

Operational Support

Some clients need assistance in performing certain operational tasks such as completing or reviewing privacy impact assessments (PIAs), data protection impact assessments (DPIAs), reviewing security/privacy questionnaires submitted by vendors, and being a subject matter expert resource for business representatives.  We can provide privacy operations support services and can also coach internal resources to help build internal capabilities.

AI Governance

The proliferation and benefits of AI are undeniable. Organizations are rapidly adopting generative AI, developing agentic systems, and building and training large language models (LLMs). In some organizations, AI use is supported by well-defined use cases that include thorough analysis of costs, benefits, risks, and controls. However, this is not always the case. AI is often deployed without appropriate governance and controls to reasonably ensure the protection of personal data, mitigation of bias and discrimination, realization of the intended business value, legal compliance, and the prevention of unintended outcomes.

We can help your organization design and implement a sensible, defensible, and sustainable AI governance framework that supports innovation while maintaining appropriate control.

Privacy Program Roadmap

Organizations that develop the most effective privacy programs have a multi-year roadmap that describes the initiatives (e.g., role-based training) to be completed in a specific year, including the resources who will part of the effort and the resources required. A roadmap not only helps ensure focus and clear purpose, it is a valuable tool for resource planning and budgeting. We can assist in preparing a roadmap for any time period desired.

Board Presentations

Presentations to the Board of Directors, Audit Committee and Executives are high stakes events that require thoughtful preparation. We can assist in preparing presentation materials and speaking points, help you anticipate and prepare for the likely and “loaded” questions, to ensure that you are prepared to deliver an impressive presentation.

Contact

We would be delighted to discuss your needs and how we can be of assistance. You can contact us at info@navigatellc.net.

Copyright © 2009-2026 Navigate LLC