Role of intrusion detection, prevention systems in Information/Data Governance framework

Uncategorized / By

Whilst it’s good to have an information and data governance framework within an organisation, it is important to pay close attention to the components that make the framework technically secure. One of those key components include the role of intrusion detection system and intrusion prevention system. An organisation has customers streaming through their online portal …

Role of intrusion detection, prevention systems in Information/Data Governance framework Read More »

On roles and responsibilities in information governance

Uncategorized / By

In mapping out a clear information governance strategy in any organisation, the board of directors has to be aligned with information governance goals and objectives. Its buy-in would enable the process to flow smoothly. Having clear roles and responsibilities would help the organisation understand owners of IT business functions, personnels to use for managing information …

On roles and responsibilities in information governance Read More »

Developing an effective incident response programme

Uncategorized / By

No matter how prepared or no matter the number of information security controls a company possesses, a time will come when the organisation suffers a computer security compromise. It is just inevitable especially if the business runs most of its processes through a network system, online or through a third-party company. Sometimes, the incident might …

Developing an effective incident response programme Read More »

MORE ON DATA SUBJECT ACCESS REQUESTS

Uncategorized / By

After the implementation of the General Data Protection Regulation(GDPR) in Europe, individuals realised the power given back to them. They can ask companies to remove their data, correct information about their data, or stop processing their data. This particular process made companies pour various resources into handling data subject access requests(DSARs). What’s more, the regulation …

MORE ON DATA SUBJECT ACCESS REQUESTS Read More »

ON WHATSAPP’s €225m FINE AND OTHER DATA PRIVACY MATTERS.

Data Privacy, Data Protection, NDPR / By

The Irish Data Protection Commission fines WhatsApp €225m (£193m). The fine stems from an ongoing investigation to ascertain whether WhatsApp has been transparent with how they process the data sets of users in their possession.    Even after several policy updates, WhatsApp consistently fails to meet the European General Data Protection Regulation demands. The big question, …

ON WHATSAPP’s €225m FINE AND OTHER DATA PRIVACY MATTERS. Read More »

MANAGING THE THIRD-PARTY LIFECYCLE PROCESS IN INFORMATION GOVERNANCE.

Data Privacy, Data Protection, NDPR / By

Let’s call the company HSH Limited. The company uses a lot of third-party companies to serve their customers, to fulfil deliveries and to keep their physical environment clean and secure. They use other third-party companies for the storage, deletion and archiving of sensitive and non-sensitive data. In one of their third-party supplier audits, they found …

MANAGING THE THIRD-PARTY LIFECYCLE PROCESS IN INFORMATION GOVERNANCE. Read More »

Mapping Controls in Data Privacy/Information Security

Uncategorized / By

“Trust, but verify.” That’s a Russian proverb that has been used in various business facets. The phrase is self-explanatory. One can trust but one should also take further steps to verify truths. In the information and data privacy space, the phrase has gained prominence. If company XYZ claims that after one-year, particular datasets will be …

Mapping Controls in Data Privacy/Information Security Read More »

THREAT IDENTIFICATION AND ANALYSIS IN INFORMATION MANAGEMENT.

Uncategorized / By

The identification of threats plays a critical function for firms. Any thriving business must know existing threats in their business to develop resilience or create abilities to withstand unpredictability. This piece introduces the meaning of threat. Peter Gregory, a renown cybersecurity expert defines threat as “an event that, if realised, would bring harm to an asset …

THREAT IDENTIFICATION AND ANALYSIS IN INFORMATION MANAGEMENT. Read More »