Flagship course
Fintech Privacy Control Audit Lab
An eleven-week studio for practitioners who must test privacy controls on living fintech products and leave a reviewer-ready evidence trail.
Learning outcomes
- Scope a privacy control audit for a payment or lending surface without boiling the ocean
- Build sampling plans for consent, retention, access, and vendor evidence
- Write control narratives that describe operation, not aspiration
- Produce findings with severity, owner, and a fix path engineering can estimate
- Assemble an evidence index a second reviewer can navigate in under an hour
Who it fits
Privacy managers, GRC analysts, product security partners, and fintech operations leads who already sit near control testing — not absolute beginners to privacy concepts.
Modules
-
Product surface mapping
Inventory data flows that matter for the audit window and decide which controls are in scope.
-
Sampling design
Choose populations, periods, and exception handling for logs and tickets without fake precision.
-
Control narratives
Describe how consent, access, retention, and vendor oversight actually run inside the product.
-
Evidence packs
Index artifacts, timestamps, and owners so a skeptical reviewer can re-perform key tests.
-
Finding craft & remediation
Calibrate severity, write actionable tickets, and plan revisit criteria after fixes land.
-
Capstone critique
Present a capped audit exercise to peers and instructors; revise based on structured feedback.
Instructor
Sora Kwon
Sora has led privacy control reviews for lending and payments teams across Korea and regional hubs. She chairs critique sessions in the Lab and insists that every finding cite a reproducible test step.
Informational pricing
Individual Lab seats map to the Control Forge tier (₩2.4M). Team delivery uses Assurance Circle pricing. Payments are arranged offline — this site does not run checkout.
FAQ
Do I need a legal background?
No. You do need familiarity with how your product stores and moves personal data. We teach audit craft, not bar exam prep.
Is there a real limitation I should know?
Yes. The Lab does not replace regulated audit opinions or licensed legal advice. Capstone exercises use sanitized case material; we cannot certify your employer’s live environment.
How much live time each week?
Plan for two 90-minute sessions plus three to five hours of artifact work. Office hours are optional.
Can my team enroll together?
Yes — ask about Assurance Circle for private delivery with a product-class case tailored to your stack.
Reviews from this course
Week four’s evidence pack critique was uncomfortable and exactly what we needed. I still think the vendor module rushes insurance examples, but payment rails coverage is strong.
★★★★★ Capstone feedback referenced my sampling sheet line by line. Rare for online cohorts.
Ask about the next Lab cohort
Share your role and product class — we will outline seat availability.
Contact us