The implementation of policies, procedures, practices, and standards designed to achieve compliance with the General Data Protection Regulation is not complicated. In this video I explain 4 basic steps to achieve compliance with any statute, law, regulation, or agreement and contract with services providers and strategic partners. These steps include #1. Conduct a Privacy Impact Assessment. The GDPR recommends the use of a Data Protection Impact Assessment (DPIA) but it is not particularly good at identifying and isolation potential risks and exposures to threats, so I have provided the recommendation and steps to completing a privacy impact assessment which is more reliable and provides higher levels of assurance to customers, strategic partners and shareholders who invest life savings in commercial enterprises that handle personally identifiable information (PII). Step #2. Operationalize Compliance. Based on my many years of experience with enterprise privacy compliance programs and information security programs I provide a valuable easy to follow strategy on how to operationalize GDPR compliance across the entire organization. By creating a PII schema, accompanied by security standards and an information handling practice GDPR compliance is achievable in a short time by organizations or any size. Step #3. Develop Data Protections Skills and Resources. This step is focused on putting knowledge and skills in the hands of employees handling PII. Step #4. Very and Validate is all about reviewing how the organization is follow its GDPR policies, procedures, practices, and standards to ensure employees are not exposing the organization to the risk of a security breach or unauthorized disclosure.
GDPR Reference videos:
(a). Cybersecurity 4 Steps to GDPR Compliance. https://vimeo.com/499918706
(b). Cybersecurity GDPR Circle of Trust. https://vimeo.com/499918553
(c). GDPR Information Handling Workflow https://vimeo.com/504243465,
(d). Cybersecurity GDPR Classification Schema https://vimeo.com/504243526,
(e). Cybersecurity GDPR Security Standards (abridged). https://vimeo.com/501968725
(f). Cybersecurity Architecture. https://vimeo.com/487673463
(g). Cybersecurity Documentation. https://vimeo.com/499897162
Likes: 0
Viewed:
source