Certified Information Privacy Technologist

A federal privacy officer wants to verify whether privacy protections that were publicly promised before a major program launched are still in place and still make sense. Which mechanism, as implemented at DHS, is specifically designed to confirm these embedded protections and offer fine-tuning recommendations?

Under the Accountability and Auditing FIPP as described for DHS, which set of activities best represents proper implementation of the principle?