dcsimg

Tackle your GDPR compliance issues head-on with IT Governance

It’s been almost a year since the GDPR (General Data Protection Regulation) came into force, but Cisco’s 2019 Data Privacy Benchmark Study found only 59% of organisations worldwide are compliant.  If you haven’t yet begun your compliance journey, you should prioritise tackling those areas where a lack of action leaves … [Read more...]

5 things you should do to improve your organisation’s staff awareness

Organisations and employees often think of staff awareness training as a hassle. Work grinds to a halt as you’re hauled off to a meeting room and lectured about stuff that probably doesn’t even affect you.  Except that it does. Human error was the primary cause of 46% of data breaches last year, according to Verizon’s 2018 Data Breach Investigations … [Read more...]

GDPR-compliant organisations reaping the benefits, study finds

Organisations that meet the requirements of the GDPR (General Data Protection Regulation) experience a wide variety of benefits, according to a new Cisco report. The 2019 Data Privacy Benchmark Study demonstrates that GDPR compliance makes organisations less susceptible to data breaches, as you’d expect, but it also streamlines business processes and helps win … [Read more...]

Does your dashcam put you within scope of the GDPR?

Dashcams have become a common feature on vehicles, with drivers eager to document their innocence when it comes to accidents or legal matters. Some insurers even offer drivers discounts for installing such devices in their cars. However, Ireland’s DPC (DataProtection Commission) has warned that dash cams might be more hassle than they’re worth. It issued guidance last week stating that the … [Read more...]

How to document your information security policy

Information security policies play a vital role in organisational security. Getting your policy right will give you an excellent framework to build on, making sure that all your efforts follow a single goal. But if you get it wrong, you risk neglecting key issues and exposing yourself to data breaches. To make sure you get off on the right track, we’ve taken some advice from Alan Calder and … [Read more...]

How to stay cyber secure over the Christmas period

If there’s a worst possible time for an organisation to suffer a data breach, it’s Christmas. That’s not only because it’s morale-sapping to suffer such bad news at a time that’s supposed to be full of cheer and optimism. There’s also the practicalities of responding to an incident at this time of year. For some organisations, particularly retailers, the Christmas period is their peak trading … [Read more...]

7 tips to help you implement a GDPR staff awareness training programme

Staff awareness training is an essential component of the GDPR (General Data Protection Regulation), but do you know how it works in practice? Here are seven things you can do to make your awareness programme a success. Consider your requirements There isn’t a ‘one-size-fits-all’ approach for staff awareness training. Every organisation needs to tailor its programme according to several … [Read more...]

Two ways data breach victims can claim compensation

  When the GDPR (General Data Protection Regulation) took effect, so much attention was paid to organisations’ compliance burdens that most people overlooked one of its main intentions, which was to give individuals more control over the way their information is used. Regulators understood that when data breaches occur, the biggest victims are often the people who that data belongs to. Sure, … [Read more...]

3 types of employees that cause data breaches

  The most overlooked part of cyber security is internal defences. Organisations pump resources into technologies that prevent criminals accessing their systems, but allow their employees to access them with only minimal safeguards. This leaves organisations vulnerable to a variety of insider threats. Here are three of the most common.   Remote workers Remote workers are a part of … [Read more...]

A checklist for responding to and reporting data breaches

There is a lot you need to do after you discover a data breach, so it’s a good idea to keep a checklist. This will help you keep track of your progress during a hectic few days and ensure that you’ve done everything necessary to comply with the EU GDPR (General Data Protection Regulation). We recommend using a list such as this: Find out what types of data are affected Find out how many records … [Read more...]