dealing with your gdpr challenges titledirector, governance, risk & compliance services...

16
Title Name Position Dealing with your GDPR Challenges Nadia Liapi Director, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ITIL Service Operations Professional Classification ISO 27001: Public

Upload: others

Post on 21-Jul-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

TitleNamePosition

Dealing with your GDPR ChallengesNadia LiapiDirector, Governance, Risk & Compliance ServicesCertified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor,

ITIL Service Operations Professional Classification ISO 27001: Public

Page 2: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

2 Space Hellas - All Rights Reserved

Agenda

GDPR in 1 minute

9 steps to GDPR

A few words for Space Hellas KEEPCALMAND

PREPARE FOR

THE GDPR

Page 3: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

GDPR in 1 minute

Time until GDPR Enforcement:

36 daysAfter four years of preparation

and debate the GDPR was

finally approved by the

EU Parliament on 14

April 2016. Enforcement

date: 25 May 2018

The EU General Data

Protection Regulation

(GDPR) is the most

important change in data

privacy regulation

in 20 years - we're here to

make sure you're prepared

Space Hellas – All rights reserved

Page 4: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

4 Space Hellas - All Rights Reserved

Raise Awareness

1Explain the Regulation / Give examples

Hold a kick off meeting and …

Make sure that people

understand

what needs to be

done / their involvement

Gain people’s trust / Their commitment

Page 5: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

5 Space Hellas - All Rights Reserved

Carry out an Audit

2

a. Audit key people

b. Audit IT systems &

procedures

c. Audit access rights

d. Perform a

Vulnerability

Assessment

e. Perform a Penetration

Test

Page 6: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

6 Space Hellas - All Rights Reserved

Detect and Assess the Risks

3 Identify Risks to ALL activities / Identify high risk activities / Perform DPIAs

Page 7: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

7 Space Hellas - All Rights Reserved

Identify all Required Measures to Achieve Compliance

4

Document Internal Audit Findings / Have a Compliance Plan / Schedule the implementation

of measures / Appoint people responsible

Page 8: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

8 Space Hellas - All Rights Reserved

Identify your Joint Controllers, Processors & Sub-Processors

5 Choose the right processors!

Page 9: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

9 Space Hellas - All Rights Reserved

Review and Update Contracts and Privacy Policies

6 • Review contracts / NDAs

• Send questionnaires

• Perform Audits

Page 10: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

10 Space Hellas - All Rights Reserved

Appoint a Data Protection Officer (DPO)

7 … if needed! Make sure he or she have the right skills, both professional and personal!

Make sure everybody in your organization knows who the DPO is.

Make sure people can contact him/her easily!

Page 11: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

11 Space Hellas - All Rights Reserved

Benefit from the One-Stop-Shop Supervisory Mechanism

8

Page 12: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

12 Space Hellas - All Rights Reserved

Inform and Enforce

9 • Training / Awareness / Audits * Measure / Improve

Page 13: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

13 Space Hellas - All Rights Reserved

GDPR Compliance or not?

Page 14: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

14 Space Hellas - All Rights Reserved

A few words for our GDPR customers

Page 15: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

15 Space Hellas - All Rights Reserved

Information Security & Data Protection Customers

?

Digital Marketing

Education

Shipping

Industries

Software

Research Institutes -

Health

Page 16: Dealing with your GDPR Challenges TitleDirector, Governance, Risk & Compliance Services Certified DPO Executive, CISM, ISO 27001 & ISO 20000 Lead Auditor, ... in 20 years - we're here

Thank you and always remember

Space Hellas is your trusted partner

TRUSTtakes years to build

seconds to break and

forever to repair…