sb-as logo
Story image

ISACA warns GDPR compliance clock is counting down fast

06 Sep 2017

ISACA is urging organisations worldwide to pick up progress on GDPR compliance requirements, with just nine months until the regulation comes into effect.

Any organisation that handles personal data of EU citizens must abide by the rules, even if the organisation itself is not located in EU.

ISACA found in a global survey that fewer than one third of senior executives and boards of directors are satisfied with their organisation’s progress preparing for GDPR.

35% of respondents were not aware of their organisation’s progress at all.

“GDPR is more aggressive than previous privacy requirements, with tougher consequences for violation. It also doesn’t define what ‘reasonable’ means in terms of the required level of personal data protection, which gives the GDPR governing body wide latitude when it comes to assessing fines for noncompliance,” comments Mark Thomas, author of ISACA’s GDPR paper.

He believes that organisations that have a solid governance structure are halfway there already. Organisations that don’t will find that the GDPR is a key driver in adopting governance structures. To help organisations move towards GDPR compliance and data privacy, ISACA has prepared ten tips that use the COBIT governance framework.

To help organisations tackle GDPR compliance and better protect the data privacy of its stakeholders, global association ISACA has issued five tips for GDPR implementation using the COBIT governance framework.

  • Develop a sense of urgency—gaining executive-level support is key.
  • Think of GDPR as an opportunity—remember that the organisation exists to create value for stakeholders, and applying the GDPR requirements adds value.
  • Inventory the organisation’s current governance frameworks and practices, including the data protection plan.
  • Appoint a data privacy officer (DPO).
  • Plan and rehearse incident response plans

In addition to GDPR compliance, ISACA is also encouraging women to get involved in technology leadership and workforce roles.

Led by ISACA’s Australia-based International Board Director Jo Stewart-Rattray, ‘SheLeadsTech’ will be an advocacy programme that drives change and ends gender equality across the technology profession.

“With the ever-growing technology workforce gap, especially in information and cyber security, and from entry-level to senior executive ranks, the demand for talent, skilled, experienced professionals is critical and clear. Women cannot and should not be left behind,” Stewart-Rattray says.

SheLeadsTech will also host networking, programme and campaign events at ISACA and partner events in 2017 and 2018.

“By engaging and supporting growth in the current and future ranks of women technology leaders, they not only will become embedded in every sector of the global tech economy, but will drive it to improved performance, emphasising innovation and the positive potential of technology,” Stewart-Rattray concludes.

Story image
Entrust launches cloud-based ID issuance solution
The Sigma instant ID solution uses encryption, trusted HSM technology and secure boot to issue highly secure physical and mobile identities.More
Story image
Insider threat report reveals deception in the workforce
Insider threats come from people inside an enterprise, whether they divulge proprietary information with nefarious intentions, or are just careless employees that unwittingly share sensitive data, writes Bitglass product marketing manager Juan Lugo.More
Story image
BlueVoyant acquires Managed Sentinel, builds out Microsoft MSS offerings
“Combining Managed Sentinel’s Azure Sentinel deployment expertise with BlueVoyant’s MDR capabilities will help customers operationalise and maximise Microsoft security technologies."More
Story image
Why best-practice threat data management provides confident automation
Understanding an organisation’s threat landscape requires having both the right threat data sources and the proper prioritisation to derive actionable threat intelligence for your organisation. More
Story image
Research: Younger cybersecurity pros more fearful of being replaced by AI
According to the findings, 53% of respondents under 45 years old either agreed or strongly agreed that AI and ML are a threat to their job security, despite 89% of this demographic believing that it would improve their jobs.More
Story image
Secureworks: Remote working exposes new security vulnerabilities
New vulnerabilities have been exposed as IT teams across the world respond to the ongoing COVID-19 pandemic.More