Data Protection Toolkit

Size: px
Start display at page:

Download "Data Protection Toolkit"

Transcription

1

2

3 Data Protection Toolkit YOUR ROAD MAP TO DATA PROTECTION MATURITY ADVANCED INTERMEDIATE EXPERT FOUNDATION 3 Security 4 Maturity - 3 Completed Delegate to Events Delegates to Events Up to 9 Hours support Up to Hours support Up to 8 Hours support Up to Hours support

4 Foundation Intermediate Objectives. Define strategic operational and tactical accountability. Create a set of policies, procedures and guidelines on key GDPR requirements 3. Create your Record of Processing Activities (ROPA) Objectives. Establish your data journeys e.g. where personal information enters your organisation, who handles it and who it is shared with. Define your strategy on providing privacy information 3. Document relationships with other organisations : & Purpose Free entry for delegate to our seminars & webinars Lawful Basis Decision Tree Legitimate Interest Assessment Tool Up to 3 Hours Validation of ROPA Up to 3 Hours Onsite (Workshop, Training, Briefing) : & Data Journeys Free entry for delegates to our seminars and webinars Data Journey information collection tools Privacy Information Strategy & Notice Up to 6 Hours Validation of Data Journeys, Supplier relationships & Privacy Information Strategy Up to 3 Hours Onsite (Workshop, Training, Briefing) Advanced Expert Security Objectives. Document your approach to information security. Assess key information security risks 3. Document decisions on how to mitigate or accept information security risks Free entry for 3 delegates to our seminars and webinars Data State security questionnaires Up to 6 Hours Helpline Up to 6 Hours Validation of key information security risks; supplier contracts. Up to 6 Hours Onsite (Workshop, Training, Briefing) Maturity Objectives. Review Organisational approach to Data Protection. Audit specific policies, procedures and practices 3. Embed organisational data protection maturity Free entry for 3 delegates to our seminars & webinars Access to all tools/documents Up to 6 Hours Validation/Document Audit Up to 3 Hours Onsite (Training, Briefing, Audit) Tel: help@protecture.org.uk

5 Fundraiser Focus + YOUR ROAD MAP TO DATA PROTECTION MATURITY INTERMEDIATE ADVANCED FOUNDATION 3 Security Online Toolkit Online Toolkit Online Toolkit Delegate to Events Up to 6 Hours support Delegates to Events Up to 9 Hours support Up to Hours support

6 Foundation Intermediate Objectives. Define fundraising strategic, operations and tactical accountability. Create a set of policies, procedures and guidelines on the key GDPR requirements for fundraising 3. Create your Fundraising Record of Processing Activities (ROPA) Objectives. Establish your fundraising data journeys e.g. where personal information enters, who handles it and where it is stored. Define your strategy on providing privacy information to donors/customers 3. Document relationships with other fundraising organisations Free entry for delegate to our seminars and webinars Lawful Basis Decision Tree Legitimate Interest Assessment Tool Up to 3 Hours Validation of ROPA Free entry for delegates to our seminars and webinars Data Journey Information collection tools Privacy Information Strategy and Notice Up to 3 Hours Validation of Data Journeys, Supplier relationships and Privacy Information Strategy Up to 3 Hours Fundraising Training 3 Advanced Your route to maturity Security Objectives. Document your approach to information security for fundraising. Assess key information security risks within your department 3. Document decisions on how to mitigate or accept information security risks Free entry for 3 delegates to our seminars and webinars Data State security questionnaires Up to 6 Hours Validation of key information security risks; supplier contracts Up to 3 Hours Fundraising Training True data protection maturity means addressing all the personal information handled by your organisation, across all aspects of data protection risk. Tel: help@protecture.org.uk

7 Data Protection Toolkit with Fundraiser Focus + YOUR ROAD MAP TO DATA PROTECTION MATURITY ADVANCED INTERMEDIATE EXPERT FOUNDATION 3 Security 4 Maturity -3 Completed Delegate to Events Delegates to Events Up to 5 Hours support Up to Hours support Up to 4 Hours support Up to 5 Hours support

8 Foundation Intermediate Objectives. Define strategic, operational and tactical accountability. Create set of policies, procedures and guidelines on key GDPR principles 3. Create your Records of Processing Activities (ROPA) Objectives. Establish your data journeys e.g. where personal information enters your organisation, who handles it and who it is shared with. Define your strategy on providing privacy information 3. Document relationships with other organisations : & Purpose Free entry for delegate to our seminars and webinars Lawful Basis Decision Tree Legitimate Interest Assessment Tool for Fundraising Team Up to 3 Hours Validation of ROPA Up to 3 Hours onsite (Workshop, Training, Briefing) Up to 3 hours Fundraising Training : & Data Journeys Free entry for delegates to our seminars and webinars Data Journey information collection tools Privacy Information Strategy and Notice for Fundraising Team Up to 9 Hours Validation of Data Journeys, Supplier relationships and Privacy Information Strategy Up to 3 Hours Onsite (Workshop, Training, Briefing) Up to 3 Hours Fundraising Training Advanced Expert Security Objectives. Document your approach to information security. Assess key information security risks 3. Document decisions on how to mitigate security risks Maturity Objectives. Review Organisational approach to Data Protection. Audit specific policies, procedures and practices 3. Embed organisational data protection maturity Free entry for 3 delegates to our seminars and webinars Data State security questionnaires for Fundraising Team Up to 9 Hours Validation of Data Journeys, Supplier relationships, Privacy Information Strategy and information security risks Up to 6 Hours Onsite (Training, Workshop, Briefing) Up to 3 Hours Fundraising Training Free entry for 3 delegates to our seminars and webinars Access to all tools/documents for Fundraising Team Up to 6 Hours Validation/Document Audit Up to 3 Hours Onsite (Training, Briefing, Audit) Tel: help@protecture.org.uk

9

EU General Data Protection Regulation (GDPR) Achieving compliance

EU General Data Protection Regulation (GDPR) Achieving compliance EU General Data Protection Regulation (GDPR) Achieving compliance GDPR enhancing data protection and privacy The new EU General Data Protection Regulation (GDPR) will apply across all EU member states,

More information

Association for International PMOs. Expert. Practitioner. Foundation PMO. Learning.

Association for International PMOs. Expert. Practitioner. Foundation PMO. Learning. AIPMO Association for International PMOs Expert Practitioner Foundation www.pmolearning.co.uk PMO Learning The Leading Standard and Certification for People Working in PMO Today Understand the Value of

More information

COBIT 5 Assessor Certification Course

COBIT 5 Assessor Certification Course COBIT 5 Assessor Certification Course About COBIT 5.0 Information is created, used, retained, disclosed and destroyed. Technology plays a key role in these actions and technology is becoming pervasive

More information

EU GDPR & ISO Integrated Documentation Toolkit https://advisera.com/eugdpracademy/eu-gdpr-iso integrated-documentation-toolkit

EU GDPR & ISO Integrated Documentation Toolkit https://advisera.com/eugdpracademy/eu-gdpr-iso integrated-documentation-toolkit EU GDPR & https://advisera.com/eugdpracademy/eu-gdpr-iso-27001-integrated-documentation-toolkit Note: The documentation should preferably be implemented in the order in which it is listed here. The order

More information

The GDPR Are you ready?

The GDPR Are you ready? The GDPR Are you ready? kpmg.ie The GDPR - Overview The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) will come into force from 25th May 2018, replacing the existing data protection

More information

The Etihad Journey to a Secure Cloud

The Etihad Journey to a Secure Cloud SESSION ID: CCS-T07 The Etihad Journey to a Secure Cloud Georges de Moura Head of Group Information Security, Risk & Compliance Etihad Aviation Group History: Before The Cloud Devolved IT Decision-Making

More information

How ISO can assist with your GDPR compliance

How ISO can assist with your GDPR compliance How ISO 27001 can assist with your GDPR compliance GDPR Summit May 30 th 2018 Sharon O Reilly IT Governance Ltd www.itgovernance.eu Introduction: Speaker Background GRC/GDPR Consultant Ireland IT Governance

More information

BHConsulting. Your trusted cybersecurity partner

BHConsulting. Your trusted cybersecurity partner Your trusted cybersecurity partner BH Consulting Securing your business BH Consulting is an award-winning, independent provider of cybersecurity consulting and information security advisory services. Recognised

More information

General Data Protection Regulation (GDPR) NEW RULES

General Data Protection Regulation (GDPR) NEW RULES General Data Protection Regulation (GDPR) NEW RULES AGENDA A. GDPR : general overview B. Sectorial topics and concerns GDPR GENERAL OVERVIEW 1. GDPR : WHAT IS IT AND WHY CARE? 27 April 2016 : Approval

More information

Birmingham Community Healthcare NHS Foundation Trust. 2017/17 Data Security and Protection Requirements March 2018

Birmingham Community Healthcare NHS Foundation Trust. 2017/17 Data Security and Protection Requirements March 2018 1.0 Executive Summary Birmingham Community Healthcare NHS Foundation Trust 2017/17 Data Security and Protection Requirements March 2018 The Trust has received a request from NHS Improvement (NHSI) to self-assess

More information

falanx Cyber ISO 27001: How and why your organisation should get certified

falanx Cyber ISO 27001: How and why your organisation should get certified falanx Cyber ISO 27001: How and why your organisation should get certified Contents What is ISO 27001? 3 What does it cover? 3 Why should your organisation get certified? 4 Cost-effective security management

More information

Importance of the Data Management process in setting up the GDPR within a company CREOBIS

Importance of the Data Management process in setting up the GDPR within a company CREOBIS Importance of the Data Management process in setting up the GDPR within a company CREOBIS 1 Alain Cieslik Personal Data is the oil of the digital world 2 Alain Cieslik Personal information comes in different

More information

Privacy. November 2017

Privacy. November 2017 Privacy November 2017 Community Concern Concerns: AU - Public service breaches AU - School breaches US Equifax, Uber US - School hacks across 3 states Action: US - 180+ new privacy laws since 2016 UK/Europe

More information

Data Sheet The PCI DSS

Data Sheet The PCI DSS Data Sheet The PCI DSS Protect profits by managing payment card risk IT Governance is uniquely qualified to provide Payment Card Industry (PCI) services. Our leadership in cyber security and technical

More information

AWS Webinar. Navigating GDPR Compliance on AWS. Christian Hesse Amazon Web Services

AWS Webinar. Navigating GDPR Compliance on AWS. Christian Hesse Amazon Web Services AWS Webinar Navigating GDPR Compliance on AWS Christian Hesse Amazon Web Services What is the GDPR? What is the GDPR? The "GDPR" is the General Data Protection Regulation, a significant new EU Data Protection

More information

ISO 27001:2013 certification

ISO 27001:2013 certification www.pwc.ch/cybersecurity ISO 27001:2013 certification Building confidence in your digital future Our approach to certification PwC offers a four-phase approach to help with your ISO 27001 project, using

More information

WELCOME ISO/IEC 27001:2017 Information Briefing

WELCOME ISO/IEC 27001:2017 Information Briefing WELCOME ISO/IEC 27001:2017 Information Briefing Denis Ryan C.I.S.S.P NSAI Lead Auditor Running Order 1. Market survey 2. Why ISO 27001 3. Requirements of ISO 27001 4. Annex A 5. Registration process 6.

More information

Developing your GDPR response for competitive advantage. EU General Data Protection Regulation (GDPR)

Developing your GDPR response for competitive advantage. EU General Data Protection Regulation (GDPR) Developing your GDPR response for competitive advantage EU General Data Protection Regulation (GDPR) Introduction In May 2018, the EU s new GDPR ushers in unprecedented levels of data protection for EU

More information

African Theatre Association (AfTA) PRIVACY POLICY

African Theatre Association (AfTA) PRIVACY POLICY African Theatre Association (AfTA) PRIVACY POLICY 1. Our Privacy Pledge We store your personal data safely. We won't share your details with anyone else. You can change your preferences or opt out from

More information

GDPR is here to stay. How prepared are you?

GDPR is here to stay. How prepared are you? GDPR is here to stay. How prepared are you? KEY TENETS What & Why GDPR? A BRIEF General Data Protection Regulation (GDPR) is the European Union s new law for individuals data privacy & protection that

More information

ISO & ISO & ISO Cloud Documentation Toolkit

ISO & ISO & ISO Cloud Documentation Toolkit ISO & ISO 27017 & ISO 27018 Cloud ation Toolkit Note: The documentation should preferably be implemented order in which it is listed here. The order of implementation of documentation related to Annex

More information

Association for International PMOs. Expert. Practitioner. Foundation PMO. Learning.

Association for International PMOs. Expert. Practitioner. Foundation PMO. Learning. AIPM Association for International PMOs Expert Practitioner Foundation www.pmolearning.co.uk PMO The Leading Standard and Certification for PMO Professionals Today Understand the Value of High-Performing

More information

Our agenda. The basics

Our agenda. The basics GDPR - AVG - RGPD. Our agenda The basics Key actions Responsibilities The basics Key actions Responsibilities Who cares? Why? From directive to regulation 24 Oct 1995: a Directive 95/46/EC is adopted partially

More information

The importance of STANDARDS to ensure ACCOUNTABILITY and GOVERNANCE in ehealth-ict security processes

The importance of STANDARDS to ensure ACCOUNTABILITY and GOVERNANCE in ehealth-ict security processes The importance of STANDARDS to ensure ACCOUNTABILITY and GOVERNANCE in ehealth-ict security processes New targets for cyberattacks New challenges for cybersecurity not only money transaction and bank accounts

More information

Sample Exam Privacy & Data Protection Foundation

Sample Exam Privacy & Data Protection Foundation Sample Exam Sample Exam Privacy & Data Protection Foundation SECO-Institute issues the official Business Continuity courseware to accredited training centres where students are trained by accredited instructors.

More information

A1 Complete Plumbing and Heating Limited Job Applicant Privacy Notice

A1 Complete Plumbing and Heating Limited Job Applicant Privacy Notice A1 Complete Plumbing and Heating Limited Job Applicant Privacy Notice A1 Complete Plumbing and Heating Limited ( A1 ), Company Number 06272295 whose registered office is 1 Horsefair Mews, Romsey, England,

More information

The NIS Directive and Cybersecurity in

The NIS Directive and Cybersecurity in The NIS Directive and Cybersecurity in ehealth Dr. Athanasios Drougkas Officer in NIS Belgian Hospitals Meeting on Security Brussels 13 th October European Union Agency For Network And Information Security

More information

ISO Information Security Management Systems Implementation Road Map

ISO Information Security Management Systems Implementation Road Map www.uaeiso.com ISO 27001 Information Security Management Systems Implementation Road Map 10 Step Approach to ISO 27001 Certification Awareness Training Information Security Policy and Objectives Finalization

More information

How to prioritise your transformation to-do list

How to prioritise your transformation to-do list How to prioritise your transformation to-do list Phil Dearson Econsultancy Digital Transformation Consultant 18 November 2014 Copyright Econsultancy Building your transformation roadmap - methodology Interviews

More information

Five steps to securing personal data online Gary Shipsey Managing Director

Five steps to securing personal data online Gary Shipsey Managing Director Five steps to securing personal data online Gary Shipsey Managing Director 25 September 2014 Agenda Learn from the mistakes of others and protect personal information online. 1 2 Where does your information

More information

Saving the Project Brief document under its own name

Saving the Project Brief document under its own name HOW TO USE THIS TEMPLATE: Introduction The template reflects the steps set out in the PRINCE2 Method and is designed to prompt the Project Manager and help in the creation of the. The information for the

More information

BHConsulting. Your trusted cybersecurity partner

BHConsulting. Your trusted cybersecurity partner Your trusted cybersecurity partner BH Consulting Securing your business BH Consulting is an award-winning, independent provider of cybersecurity consulting and information security advisory services. Recognised

More information

Incentives for IoT Security. White Paper. May Author: Dr. Cédric LEVY-BENCHETON, CEO

Incentives for IoT Security. White Paper. May Author: Dr. Cédric LEVY-BENCHETON, CEO White Paper Incentives for IoT Security May 2018 Author: Dr. Cédric LEVY-BENCHETON, CEO Table of Content Defining the IoT 5 Insecurity by design... 5 But why are IoT systems so vulnerable?... 5 Integrating

More information

Privacy Notice: Volunteers of Turning Point Scotland

Privacy Notice: Volunteers of Turning Point Scotland Privacy Notice: Volunteers of Turning Point Scotland THE EU GENERAL DATA PROTECTION REGULATIONS (GDPR) AND THE DATA PROTECTION BILL (DPB) GDPR regulations became law on 25 May 2018. This means that organisations

More information

Data Warehouse Risk Assessment (GDPR)

Data Warehouse Risk Assessment (GDPR) Data Warehouse Risk Assessment (GDPR) The new data protection law is effective from 25.05.2018. Individuals will have more control of their personal data and organisations will have to implement a risk

More information

ITIL Managing Across the Lifecycle Course

ITIL Managing Across the Lifecycle Course ITIL Managing Across the Lifecycle Course Duration: 5 Days Course Delivery: Classroom Language: English Course Overview ITIL 2011 edition is comprised of five core publications: Service Strategy, Service

More information

Incident Response Services to Help You Prepare for and Quickly Respond to Security Incidents

Incident Response Services to Help You Prepare for and Quickly Respond to Security Incidents Services to Help You Prepare for and Quickly Respond to Security Incidents The Challenge The threat landscape is always evolving and adversaries are getting harder to detect; and with that, cyber risk

More information

GDPR Impacts. SEV GDPR Workshop Athens Giles Watkins, UK Country Leader. Wednesday 7th February,

GDPR Impacts. SEV GDPR Workshop Athens Giles Watkins, UK Country Leader. Wednesday 7th February, GDPR Impacts SEV GDPR Workshop Athens Giles Watkins, UK Country Leader Wednesday 7th February, 2018 Agenda What is the Privacy Opportunity? What is different under GDPR? Where organisations are focusing?

More information

Information Security: the heart of the paperto-digital. 14 th September 2017

Information Security: the heart of the paperto-digital. 14 th September 2017 Information Security: the heart of the paperto-digital journey 14 th September 2017 Agenda 13.00-13.05 Preparing for GDPR (video) Information Commissioner's Office 13.05-13.35 GDPR: What to expect, Martin

More information

DELIVERING SIMPLIFIED CYBER SECURITY JOURNEYS

DELIVERING SIMPLIFIED CYBER SECURITY JOURNEYS DELIVERING SIMPLIFIED CYBER SECURITY JOURNEYS Building digital trust and cyber security resilience is no longer just an IT issue, it s a business mandate. Fusion brings a simplified approach to our client

More information

DATA PROTECTION ISACA MALTA CHAPTER BIENNIAL CONFERENCE Saviour Cachia Commissioner for Information and Data Protection

DATA PROTECTION ISACA MALTA CHAPTER BIENNIAL CONFERENCE Saviour Cachia Commissioner for Information and Data Protection DATA PROTECTION ISACA MALTA CHAPTER BIENNIAL CONFERENCE 2016 Saviour Cachia Commissioner for Information and Data Protection Conception of DPA Council of Europe ETS 108 Convention on the protection of

More information

PROJECT BACKGROUND AND RATIONALE

PROJECT BACKGROUND AND RATIONALE PROJECT BACKGROUND AND RATIONALE The political agreement on the EU General Data Protection Regulation (GDPR) has been reached and the new Regulation will be on the books by the end of the first quarter

More information

itsmf ITIL V3: Accelerate Success with Tools Maria A Medvedeva, PMP, ITIL Regional Director CA, Inc. itsmf Middle East Board of Directors

itsmf ITIL V3: Accelerate Success with Tools Maria A Medvedeva, PMP, ITIL Regional Director CA, Inc. itsmf Middle East Board of Directors itsmf ITIL V3: Accelerate Success with Tools Maria A Medvedeva, PMP, ITIL Regional Director CA, Inc. itsmf Middle East Board of Directors Dubai, June 11, 2007 Challenging Questions > Should we slow down

More information

PECB Certified ISO Lead Implementer

PECB Certified ISO Lead Implementer PECB Certified ISO 22301 Lead Implementer PECB Certified ISO 22301 Lead Implementer 5 Days with Examination Course Description This five day intensive course enables the participants to develop the necessary

More information

Data Management and Security in the GDPR Era

Data Management and Security in the GDPR Era Data Management and Security in the GDPR Era Franck Hourdin; Vice President, EMEA Security Russ Lowenthal; Director, Database Security Product Management Mike Turner; Chief Operating Officer, Capgemini

More information

EY s data privacy service offering. How to transform your data privacy capabilities for an EU General Data Protection Regulation (GDPR) world

EY s data privacy service offering. How to transform your data privacy capabilities for an EU General Data Protection Regulation (GDPR) world EY s data privacy service offering How to transform your data privacy capabilities for an EU General Data Protection Regulation (GDPR) world In May 2018, the European Union s new General Data Protection

More information

New International Health and Safety Standard ISO 45001

New International Health and Safety Standard ISO 45001 New International Health and Safety Standard ISO 45001 By Mr. Coleman Tse, Sales & Marketing Director, BSI Hong Kong 4/24/2015 Who is BSI? Royal Charter Status focused on the development of standards,

More information

CYBER THREAT INTELLIGENCE TOWARDS A MATURE CTI PRACTICE

CYBER THREAT INTELLIGENCE TOWARDS A MATURE CTI PRACTICE CYBER THREAT INTELLIGENCE TOWARDS A MATURE CTI PRACTICE Richard Kerkdijk December 7th 2017 A WORD ABOUT TNO Dutch innovation and advisory body, founded by law in 1932 and currently comprising some 2800

More information

Eco Web Hosting Security and Data Processing Agreement

Eco Web Hosting Security and Data Processing Agreement 1 of 7 24-May-18, 11:50 AM Eco Web Hosting Security and Data Processing Agreement Updated 19th May 2018 1. Introduction 1.1 The customer agreeing to these terms ( The Customer ), and Eco Web Hosting, have

More information

Hybrid IT Managed Services

Hybrid IT Managed Services Hybrid IT Managed Services Working together on your digital journey Welcome to the new world of Hybrid IT Managed Services. Digital technology is rapidly changing and improving our world. As your organisation

More information

Data Security Standards

Data Security Standards Data Security Standards Overall guide The bigger picture of where the standards fit in 2018 Copyright 2017 Health and Social Care Information Centre. The Health and Social Care Information Centre is a

More information

IT123: SABSA Foundation Training

IT123: SABSA Foundation Training IT123: SABSA Foundation Training IT123 Rev.002 CMCT COURSE OUTLINE Page 1 of 8 Training Description: SABSA is the world s leading open security architecture framework and methodology. SABSA is a top-tobottom

More information

GÉANT Community Programme

GÉANT Community Programme GÉANT Community Programme Building the community Klaas Wierenga Chief Community Support Officer GÉANT Information day, Tirana, 5 th April 1 Membership Association = very large community to serve GÉANT

More information

CISO MASTERCLASS FOR SENIOR EXECUTIVES 2 DAYS

CISO MASTERCLASS FOR SENIOR EXECUTIVES 2 DAYS CISO MASTERCLASS FOR SENIOR EXECUTIVES 2 DAYS CISO MASTERCLASS FOR SENIOR EXECUTIVES Introduction The CISO (Chief Information Security Officer) boot camp does not focus on technical knowledge but on the

More information

SCHOOL SUPPLIERS. What schools should be asking!

SCHOOL SUPPLIERS. What schools should be asking! SCHOOL SUPPLIERS What schools should be asking! Page:1 School supplier compliance The General Data Protection Regulation (GDPR) comes into force on 25 May 2018 and will be applied into UK law via the updated

More information

Data Protection Policy

Data Protection Policy Data Protection Policy Data Protection Policy Version 3.00 May 2018 For more information, please contact: Technical Team T: 01903 228100 / 01903 550242 E: info@24x.com Page 1 The Data Protection Law...

More information

Hallmark Solutions Limited PRIVACY NOTICE

Hallmark Solutions Limited PRIVACY NOTICE Hallmark Solutions Limited PRIVACY NOTICE Who We Are Hallmark Solutions Limited specialise in the delivery of IT related projects, including consultancy, project management, software development and training.

More information

Workshop Implementing a carbon mitigation programme. François KORNMANN IFC. June 15 th 2018 LIFE14 GIC/FR/

Workshop Implementing a carbon mitigation programme. François KORNMANN IFC. June 15 th 2018 LIFE14 GIC/FR/ Workshop Implementing a carbon mitigation programme François KORNMANN IFC June 15 th 2018 LIFE14 GIC/FR/000475 http://www.climfoot-project.eu 1 Roundtable - Name - Organisation / position - Country 2 Content

More information

The CQUIN Learning Network Annual Meeting

The CQUIN Learning Network Annual Meeting Annual Meeting CQUIN Dashboard: Development and Implementation Dr. Maureen Syowai ICAP at Columbia University February 13-15 Maputo, Mozambique Outline Background Implementation Results Conclusions 2 Background

More information

Privacy Notice Alumni

Privacy Notice Alumni Privacy Notice Alumni Issued: 18/01 Page 1 of 8 Review: April 2018 Contents: 1 Scope... 3 2 Responsibilities... 3 3 Privacy notice... 3 3.1 Who are we?... 3 3.2 Consent... 4 3.3 Disclosure... 4 3.4 Retention

More information

Embedding GDPR into the SDLC. Sebastien Deleersnyder Siebe De Roovere

Embedding GDPR into the SDLC. Sebastien Deleersnyder Siebe De Roovere Embedding GDPR into the SDLC Sebastien Deleersnyder Siebe De Roovere Who is Who? Sebastien Deleersnyder 5 years developer experience 15+ years information security experience Application security consultant

More information

NIS-Directive and Smart Grids

NIS-Directive and Smart Grids NIS-Directive and Smart Grids Workshop on European Smart Grid Cybersecurity: Emerging Threats and Countermeasures Marie Holzleitner Table of Content Aims & Objectives Affected Parties Selected Requirements

More information

Accelerate GDPR compliance with the Microsoft Cloud

Accelerate GDPR compliance with the Microsoft Cloud Regional Forum on Cybersecurity in the Era of Emerging Technologies & the Second Meeting of the Successful Administrative Practices -2017 Cairo, Egypt 28-29 November 2017 Accelerate GDPR compliance with

More information

COB Certified E-Commerce & E-Business Manager E-Learning Options

COB Certified E-Commerce & E-Business Manager E-Learning Options COB Certified E-Commerce & E-Business Manager E-Learning Options Course Information USD Edition The Certificate in Online Business www.cobcertified.com August 2017 Edition V.5 1 Table of Contents INTRODUCTION...

More information

standards and frameworks and controls oh my! Mike Garcia Senior Advisor for Elections Best Practices

standards and frameworks and controls oh my! Mike Garcia Senior Advisor for Elections Best Practices standards and frameworks and controls oh my! Mike Garcia Senior Advisor for Elections Best Practices mike.garcia@cisecurity.org The big three in their own words ISO 27000: family of standards to help organizations

More information

Volume 2014, Number 4. Volunteers Needed!

Volume 2014, Number 4. Volunteers Needed! Volume 2014, Number 4 Volunteers Needed! Volunteering for NJ ISACA is a great opportunity to expand your professional contacts and your IT knowledge base. NJ ISACA needs talented professionals like you

More information

General Data Protection Regulation: Knowing your data. Title. Prepared by: Paul Barks, Managing Consultant

General Data Protection Regulation: Knowing your data. Title. Prepared by: Paul Barks, Managing Consultant General Data Protection Regulation: Knowing your data Title Prepared by: Paul Barks, Managing Consultant Table of Contents 1. Introduction... 3 2. The challenge... 4 3. Data mapping... 7 4. Conclusion...

More information

EY s Data Privacy Services. January 2019

EY s Data Privacy Services. January 2019 EY s Data Privacy Services January 2019 Introduction Data privacy encompasses the rights and obligations of individuals and organizations with respect to the collection, use, disclosure, and retention

More information

Breaches and Remediation

Breaches and Remediation Breaches and Remediation Ramona Oliver US Department of Labor Personally Identifiable Information Personally Identifiable Information (PII): Any information about an individual maintained by an agency,

More information

Service Description: Identity Services Engine Implementation-Subscription Service

Service Description: Identity Services Engine Implementation-Subscription Service Page 1 of 6 Service Description: Identity Services Engine Implementation-Subscription Service Services Summary This document describes the Identity Services Engine Implementation. Subscription Service.

More information

Modern slavery and human trafficking statement 2017

Modern slavery and human trafficking statement 2017 Modern slavery and human trafficking statement 2017 Ericsson.com Statement for financial year 2017 Introduction Conducting business responsibly is the foundation of Ericsson s commitment to sustainability

More information

How icims Supports. Your Readiness for the European Union General Data Protection Regulation

How icims Supports. Your Readiness for the European Union General Data Protection Regulation How icims Supports Your Readiness for the European Union General Data Protection Regulation The GDPR is the EU s next generation of data protection law. Aiming to strengthen the security and protection

More information

QSEC - ISMS and GRC according to international standards and methods WMC GmbH / short presentation QSEC Suiten / Werner Wüpper

QSEC - ISMS and GRC according to international standards and methods WMC GmbH / short presentation QSEC Suiten / Werner Wüpper QSEC - ISMS and GRC according to international standards and methods Best in Class is not a coincidence! Consulting ISMS & GRC software Sectors 2 C O N S U L T I N G S O F T W A R E + S U P P O R T WMC

More information

General Data Protection Regulation (GDPR)

General Data Protection Regulation (GDPR) General Data Protection Regulation (GDPR) a. General Data Protection... 2 b. IT systems compliance... 2 c. Employee awareness... 2 d. Information we hold... 3 e. Data flow & Data sharing... 4 f. Data Accuracies

More information

CyberSecurity: Top 20 Controls

CyberSecurity: Top 20 Controls CyberSecurity: Top 20 Controls ISACA Kampala Chapter CPD Event - 30 March 2017 By Bernard Wanyama - CISA, CGEIT, CRISC, CISM Assume breach.. The CIS Top 20 Critical Security Controls CIS, SANS, NSA and

More information

Data Processing Agreement

Data Processing Agreement In accordance with the European Parliament- and Council s Directive (EU) 2016/679 of 27th April 2016 (hereinafter GDPR) on the protection of physical persons in connection with the processing of personal

More information

Certification Description of Malaysia Sustainable Palm Oil (MSPO) Standard

Certification Description of Malaysia Sustainable Palm Oil (MSPO) Standard The certification of a management system based on standard Malaysia Sustainable Palm Oil Standard (MSPO) respectively, consists of the offer and contract phase, the audit preparation, performance of the

More information

Wonde may collect personal information directly from You when You:

Wonde may collect personal information directly from You when You: Privacy Policy Updated: 17th April 2018 1. Scope At Wonde, we take privacy very seriously. We ve updated our privacy policy ( Policy ) to ensure that we communicate to You, in the clearest way possible,

More information

Embedding GDPR into the SDLC

Embedding GDPR into the SDLC Embedding GDPR into the SDLC Sebastien Deleersnyder Siebe De Roovere Toreon 2 Who is Who? Sebastien Deleersnyder Siebe De Roovere 5 years developer experience 15+ years information security experience

More information

Trust. Trustworthiness Trusted. Trust: Who? What? When? Why? How?

Trust. Trustworthiness Trusted. Trust: Who? What? When? Why? How? Trust Trustworthiness Trusted Trust: Who? What? When? Why? How? 1 Certification / Assessment is a spectrum GAFAT Websites Apps Self Asserted Basic Check Self Certified Independent Verification Independently

More information

Data Protection Policy

Data Protection Policy The Worshipful Company of Framework Knitters Data Protection Policy Addressing the General Data Protection Regulation (GDPR) 2018 [EU] and the Data Protection Act 1998 (DPA) [UK] For information on this

More information

Promise Dreams Privacy Policy

Promise Dreams Privacy Policy Promise Dreams Privacy Policy Introduction Promise Dreams ( we ) promises to respect any personal data you share with us and keep it safe. We aim to be clear when we collect your data and not do anything

More information

Standardization in the area of Cooperative systems in the MENA region

Standardization in the area of Cooperative systems in the MENA region Standardization in the area of Cooperative systems in the MENA region SAFE, SMART and SUSTAINABLE TRAFFIC VIA COOPERATIVE ITS 4th ETSI TC ITS Workshop 07-09 February 2012, Doha, Qatar Dr Muna Hamdi Director

More information

NHS R&D Forum Privacy Policy: FINAL v0.1 May 25 th 2018

NHS R&D Forum Privacy Policy: FINAL v0.1 May 25 th 2018 NHS R&D Forum Privacy Policy: FINAL v0.1 May 25 th 2018 This privacy policy is published to provide transparent information about how we use, share and store any personal information that you may provide

More information

The Impact of GDPR Compliance on IT and Security

The Impact of GDPR Compliance on IT and Security The Impact of GDPR Compliance on IT and Security Experts on Panel Bojana Bellamy President Centre for Information Policy Leadership Vibhav Agarwal Director MetricStream 2017 MetricStream, Inc. All Rights

More information

Guide To Navigating POPI

Guide To Navigating POPI Guide To Navigating POPI July 2014 Table of Contents Introduction 3 About this Guide 4 10 Points to Consider on the Road to POPI Compliance 5 - Specific Business Purpose or Consent 6 - Maintain the Quality

More information

Order of Malta Volunteers Privacy Statement

Order of Malta Volunteers Privacy Statement Order of Malta Volunteers Privacy Statement The Order of Malta Volunteers ( the OMV, We, Us ), is a charity registered in England and Wales with charity number 1164242. Its registered address is 13 Deodar

More information

The Network and Information Security Directive - ENISA's contribution

The Network and Information Security Directive - ENISA's contribution The Network and Information Security Directive - ENISA's contribution Konstantinos Moulinos Information Security Expert 3rd IMPROVER- ERNCIP Operators Workshop Lisbon 23.05.2018 European Union Agency for

More information

GDPR: The Day After. Pierre-Luc REFALO

GDPR: The Day After. Pierre-Luc REFALO GDPR: The Day After Pierre-Luc REFALO The speaker: Pierre-Luc REFALO Global Head of Strategic Cybersecurity Consulting 25+ years in Information & Cyber Security consultancy CISO for SFR & Vivendi Universal

More information

Fintech District. The First Testing Cyber Security Platform. In collaboration with CISCO. Cloud or On Premise Platform

Fintech District. The First Testing Cyber Security Platform. In collaboration with CISCO. Cloud or On Premise Platform Fintech District The First Testing Cyber Security Platform In collaboration with CISCO Cloud or On Premise Platform WHAT IS SWASCAN? SWASCAN SERVICES Cloud On premise Web Application Vulnerability Scan

More information

IBM Security Guardium Analyzer

IBM Security Guardium Analyzer IBM Guardium Analyzer Highlights Assess security & compliance risk associated with GDPR data Find GDPR data across onpremises and cloud databases Scan for database vulnerabilities Leverage next-generation

More information

PPI Adhesive Products Ltd. PRIVACY NOTICE 1. WHAT IS A PRIVACY NOTICE & WHY IS IT IMPORTANT?

PPI Adhesive Products Ltd. PRIVACY NOTICE 1. WHAT IS A PRIVACY NOTICE & WHY IS IT IMPORTANT? 1. WHAT IS A & WHY IS IT IMPORTANT? We know your personal information is important to you and it is also very important to PPI Adhesive Products Ltd. This Privacy Notice tells you what we use your personal

More information

BHBIA New Data Protection Rules. Pharma Company Perspective. Guy Murray Director, Market Research & Analytics, GC&BI MR Operations and Compliance, MSD

BHBIA New Data Protection Rules. Pharma Company Perspective. Guy Murray Director, Market Research & Analytics, GC&BI MR Operations and Compliance, MSD BHBIA New Data Protection Rules Pharma Company Perspective Guy Murray Director, Market Research & Analytics, GC&BI MR Operations and Compliance, MSD Pharma Company Perspective Data Controllers Responsibilities

More information

ITIL Service Lifecycle Strategy

ITIL Service Lifecycle Strategy ITIL Service Lifecycle Strategy Course Details Course Code: Duration: Notes: ITILSL-Str 5 days This course syllabus should be used to determine whether the course is appropriate for the students, based

More information

Planning and Implementing ITIL in ICT Organisations

Planning and Implementing ITIL in ICT Organisations CCPM Solutions Experts in ICT Performance Supporting Your Business Planning and Implementing ITIL in ICT Organisations June 2012, Addis Ababa Content 1. Quick ITIL (Overview) 2. Case study (How not to

More information

Data Protection Statement. Trinity Development & Alumni

Data Protection Statement. Trinity Development & Alumni Data Protection Statement Trinity Development & Alumni 1 Data protection statement for alumni and supporters 1.1 Introduction This privacy notice explains how Trinity Development and Alumni (TDA) handles

More information

Ready, Willing & Able. Michael Cover, Manager, Blue Cross Blue Shield of Michigan

Ready, Willing & Able. Michael Cover, Manager, Blue Cross Blue Shield of Michigan Ready, Willing & Able Michael Cover, Manager, Blue Cross Blue Shield of Michigan Agenda 1. Organization Overview 2. GRC Journey Story 3. GRC Program Roadmap 4. Program Objectives and Guiding Principals

More information

National Cyber Security Strategy (NCS) Toolkit

National Cyber Security Strategy (NCS) Toolkit National Cyber Security Strategy (NCS) Toolkit Let s create a toolkit to help states to develop or improve their national cyber security strategies Examples of Topics To Be Addressed The role, objectives

More information

Privacy Notice Q-UK-PO02

Privacy Notice Q-UK-PO02 1. Scope 1.1. This informs users about the nature, extent, and purpose of the collection and use of personal data by Colt Group Limited and Colt International Limited ( Colt or the Company ). This governs

More information

World Wide Jobs Ltd t/a Findmyexpert.com Privacy Policy 12 th April 2018

World Wide Jobs Ltd t/a Findmyexpert.com Privacy Policy 12 th April 2018 World Wide Jobs Ltd t/a Findmyexpert.com Privacy Policy 12 th April 2018 We understand that you are aware of and care about your own personal privacy interests and we take that seriously. This Privacy

More information