6.4.1 The data protection audit shall contain the following information as specified in Article 4.1(5) of the NDPR. A standard template for the audit report is attached as Annexure A to this Framework. It should act as a guide for DPCOs and DPOs in the course of audit implementation. 6.5 The Role of DPCOs in Data Audits (Art. 4.1(4) NDPR) In the performance of data audits, DPCOs are responsible for: a) evaluating the status of compliance by the organization. NITDA expects DPCOs to base their findings on verifiable documents and practices; b) appraising Data Subjects rights protection. The DPCO should be satisfied that the organisation has clear processes to protect the rights of the Data Subject; c) assessing the level of awareness by top management, members of staff, contractors and customers of the NDPR; d) identifying current or potential non-compliance; and e) drawing up a remedial plan to remediate identified noncompliances. 6.6 Audit Verification Statement by DPCO (Art. 4.1(4) NDPR) A DPCO shall make the following audit verification as a pre-condition to the filing of an annual audit report or any other report demanded by NITDA. I ……………………. Of ………………………………. a licensed Data Protection Compliance Organisation (DPCO) under Article 4.1(4) of the Nigeria Data Protection Regulation (NDPR) hereby make this statement on oath that the Data Audit Report filed by ……………………… (Name of Organisation) is conducted in line 15 | P a g e