Evaluates the current status of regulatory compliance with Law 1581 of 2012 of the SIC and Law 1266 of 2008 of the SIF, by evaluating the life cycle of the data, transactional flows of personal information and the risks and controls of the database identified data.

The scope is defined mainly on regulatory compliance and is focused on Companies that have an obligation to comply with the aforementioned laws.