mireneglobal – Mirene Global Consults

Role of intrusion detection, prevention systems in Information/Data Governance framework

Whilst it’s good to have an information and data governance framework within an organisation, it is important to pay close attention to the components that make the framework technically secure. One of those key components include the role of intrusion detection system and intrusion prevention system. An organisation has customers streaming through their online portal …

Role of intrusion detection, prevention systems in Information/Data Governance framework Read More »

On roles and responsibilities in information governance

Uncategorized / By mireneglobal

In mapping out a clear information governance strategy in any organisation, the board of directors has to be aligned with information governance goals and objectives. Its buy-in would enable the process to flow smoothly. Having clear roles and responsibilities would help the organisation understand owners of IT business functions, personnels to use for managing information …

On roles and responsibilities in information governance Read More »

Lines of Defence in Information Governance

Uncategorized / By mireneglobal

In information governance and more particularly, in the management of risks embedded within any information governance framework, there needs to be an effective and consistent way in managing risks. The lines of defence model serves as the basis for risk management within business functions and departments in most organisations. In this piece, I explore the …

Lines of Defence in Information Governance Read More »

Developing an effective incident response programme

Uncategorized / By mireneglobal

No matter how prepared or no matter the number of information security controls a company possesses, a time will come when the organisation suffers a computer security compromise. It is just inevitable especially if the business runs most of its processes through a network system, online or through a third-party company. Sometimes, the incident might …

Developing an effective incident response programme Read More »

MORE ON DATA SUBJECT ACCESS REQUESTS

Uncategorized / By mireneglobal

After the implementation of the General Data Protection Regulation(GDPR) in Europe, individuals realised the power given back to them. They can ask companies to remove their data, correct information about their data, or stop processing their data. This particular process made companies pour various resources into handling data subject access requests(DSARs). What’s more, the regulation …

MORE ON DATA SUBJECT ACCESS REQUESTS Read More »

ON WHATSAPP’s €225m FINE AND OTHER DATA PRIVACY MATTERS.

Data Privacy, Data Protection, NDPR / By mireneglobal

The Irish Data Protection Commission fines WhatsApp €225m (£193m). The fine stems from an ongoing investigation to ascertain whether WhatsApp has been transparent with how they process the data sets of users in their possession. Even after several policy updates, WhatsApp consistently fails to meet the European General Data Protection Regulation demands. The big question, …

ON WHATSAPP’s €225m FINE AND OTHER DATA PRIVACY MATTERS. Read More »

MANAGING THE THIRD-PARTY LIFECYCLE PROCESS IN INFORMATION GOVERNANCE.

Data Privacy, Data Protection, NDPR / By mireneglobal

Let’s call the company HSH Limited. The company uses a lot of third-party companies to serve their customers, to fulfil deliveries and to keep their physical environment clean and secure. They use other third-party companies for the storage, deletion and archiving of sensitive and non-sensitive data. In one of their third-party supplier audits, they found …

MANAGING THE THIRD-PARTY LIFECYCLE PROCESS IN INFORMATION GOVERNANCE. Read More »

Mapping Controls in Data Privacy/Information Security

Uncategorized / By mireneglobal

“Trust, but verify.” That’s a Russian proverb that has been used in various business facets. The phrase is self-explanatory. One can trust but one should also take further steps to verify truths. In the information and data privacy space, the phrase has gained prominence. If company XYZ claims that after one-year, particular datasets will be …

Mapping Controls in Data Privacy/Information Security Read More »

VULNERABILITY IN INFORMATION MANAGEMENT SYSTEMS

Business, Data Privacy, Data Protection / By mireneglobal

It is important to define vulnerability first. The United Kingdom’s National Cyber Security Centre defines it as a “weakness in an IT system that can be exploited by an attacker to deliver a successful attack.” In other words, they are gaps that any group of unscrupulous individuals can use for malicious works.

THREAT IDENTIFICATION AND ANALYSIS IN INFORMATION MANAGEMENT.

Uncategorized / By mireneglobal

The identification of threats plays a critical function for firms. Any thriving business must know existing threats in their business to develop resilience or create abilities to withstand unpredictability. This piece introduces the meaning of threat. Peter Gregory, a renown cybersecurity expert defines threat as “an event that, if realised, would bring harm to an asset …

THREAT IDENTIFICATION AND ANALYSIS IN INFORMATION MANAGEMENT. Read More »