David C.

***Simplify Compliance and Reach Your Business Goals: Trust Compliance That Passes Audits*** Are you struggling to meet the rigorous standards of data protection, GDPR, ISO 27001, and SOC2 cybersecurity? Look no further than Compliance That Passes Audits Cyber Security|GDPR| Data Protection| DPIA ,ISO27001 Lead Auditor ***Do YOU Need The Following for meeting GDPR, Data Protection, Cyber Security Alignment? ________________________________________________________ "Excellent professional without whose he would not have got our ISO27001 certification. Highly recommended." "David's knowledge of the General Data Protection Regulation and Information Security is admirable, but what really stood out was his ability to implement GDPR - he understood what it meant to organisations in the real world, and what needed to be done as a result." "David's an incredibly knowledgeable person on his subject matter with the rare ability to communicate all technical parts of his role in layman's terms for the uninitiated, a true SME." ___________________________________________________________________________ Avoid the Following RISKS. ~~~Fines, Loss of Business, Enforcement Action, BreachLess Liability, Breach Losses~~~ #Breaches are now reportable (72 Hours) (59,000 reported in Europe so far) #Class Actions/Group Actions for GDPR (Happening now all over the world) #Incorrect Privacy Notices (Emma's Diaries and others) #Risk Of Data Breach is $7% UK Government Figures #3rd Party Contract Checks by Data Protection Authorities, Danish DPA #Privacy Notice Checks By Data Protection Authorities #Complaints by Consumers over 40,000 in the UK so far, ***Alignment with Data Protection will REQUIRE ....... • GDPR Awareness Article 39, Article 47 - Legal Requirement • Breach Notification Procedure process Article 33, Article 34 - Legal Requirement • Data Protection Impact Assessment DPIA Article 35 - Legal Requirement • Record Of Processing Article 30 - Legal Requirement • Data protection Maturity Assessment Article 5 + Security Audits/ISO27001/PC-DSS/GDPR Cyber Security and Data protection Risk Management Policy and Procedure review (Security Policy, Retention Policy, Data Protection Policy etc..) Expected by the GDPR and Data Protection Legislation. No Matter what your situation GDPR alignment and direction of GDPR can be always improved, Because I have done this many times for all types of businesses and size of business. If YOU were to do only one thing I would suggest a FIXED Price Data Protection/GDPR maturity audit which highlights any gaps in your businesses Data protection program and planning and enables the risks to be managed. There are another 4 very visible Requirements mandated by the GDPR to be met. If Your customers and auditors are asking for audits, documents, Gap analysis, and evidence of managing Cyber Security Security. These processes and Documents will drive your business FORWARD. ++++++ Make Sure your organization can DEMONSTRATE the principle of Accountability (Article 5) , This Accountability principle is the one that appears in Data Protection Authorities enforcement notices as well as customer checks and audits. ++++++ ***The Solution Let us work together to put these concepts into reality and systematize in often complex environments typically involving multi-departments to avoid or control an unnecessary event and using lessons learned to reduce the effect of FUTURE events. Your business can use these systems, policies, and procedures that will work in every vertical. Professional certifications: ISO27001 Lead Auditor, Chief Security Officer C|CISO, CITP, FBCS and authored over 3 GDPR e-learning courses.