The procedure the auditor will follow when handling incidents. 24 The data security standards for evidence handling and communication. 25 A liability waiver signed by the host organization. 26 Approval from any third parties. 27 See the Appendix for a DRAFT combined engagement and confidentiality agreement. Recommendation CONFIDENTIALITY AGREEMENT Summary Negotiate an agreement with the organization that outlines how an auditor will protect the privacy of the organization and the outcomes of the audit. Overview Host provides auditor consent to conduct the agreed to scope of the audit in the form of a signed liability waiver. 28 Materials Needed Considerations Walkthrough See the Appendix for a DRAFT Engagement and Confidentiality Agreement. Recommendation INCIDENT RESPONSE AND EMERGENCY CONTACT Page 17 of 240