Story image

ISACA warns GDPR compliance clock is counting down fast

06 Sep 2017

ISACA is urging organisations worldwide to pick up progress on GDPR compliance requirements, with just nine months until the regulation comes into effect.

Any organisation that handles personal data of EU citizens must abide by the rules, even if the organisation itself is not located in EU.

ISACA found in a global survey that fewer than one third of senior executives and boards of directors are satisfied with their organisation’s progress preparing for GDPR.

35% of respondents were not aware of their organisation’s progress at all.

“GDPR is more aggressive than previous privacy requirements, with tougher consequences for violation. It also doesn’t define what ‘reasonable’ means in terms of the required level of personal data protection, which gives the GDPR governing body wide latitude when it comes to assessing fines for noncompliance,” comments Mark Thomas, author of ISACA’s GDPR paper.

He believes that organisations that have a solid governance structure are halfway there already. Organisations that don’t will find that the GDPR is a key driver in adopting governance structures.

To help organisations move towards GDPR compliance and data privacy, ISACA has prepared ten tips that use the COBIT governance framework.

To help organisations tackle GDPR compliance and better protect the data privacy of its stakeholders, global association ISACA has issued five tips for GDPR implementation using the COBIT governance framework.

  • Develop a sense of urgency—gaining executive-level support is key.
  • Think of GDPR as an opportunity—remember that the organisation exists to create value for stakeholders, and applying the GDPR requirements adds value.
  • Inventory the organisation’s current governance frameworks and practices, including the data protection plan.
  • Appoint a data privacy officer (DPO).
  • Plan and rehearse incident response plans

In addition to GDPR compliance, ISACA is also encouraging women to get involved in technology leadership and workforce roles.

Led by ISACA’s Australia-based International Board Director Jo Stewart-Rattray, ‘SheLeadsTech’ will be an advocacy programme that drives change and ends gender equality across the technology profession.

“With the ever-growing technology workforce gap, especially in information and cyber security, and from entry-level to senior executive ranks, the demand for talent, skilled, experienced professionals is critical and clear. Women cannot and should not be left behind,” Stewart-Rattray says.

SheLeadsTech will also host networking, programme and campaign events at ISACA and partner events in 2017 and 2018.

“By engaging and supporting growth in the current and future ranks of women technology leaders, they not only will become embedded in every sector of the global tech economy, but will drive it to improved performance, emphasising innovation and the positive potential of technology,” Stewart-Rattray concludes.

SecOps: Clear opportunities for powerful collaboration
If there’s one thing security and IT ops professionals should do this year, the words ‘team up’ should be top priority.
Interview: Culture and cloud - the battle for cybersecurity
ESET CTO Juraj Malcho talks about the importance of culture in a cybersecurity strategy and the challenges and benefits of a world in the cloud.
Enterprise cloud deployments being exploited by cybercriminals
A new report has revealed a concerning number of enterprises still believe security is the responsibility of the cloud service provider.
Ping Identity Platform updated with new CX and IT automation
The new versions improve the user and administrative experience, while also aiming to meet enterprise needs to operate quickly and purposefully.
Venafi and nCipher Security partner on machine identity protection
Cryptographic keys serve as machine identities and are the foundation of enterprise information technology systems.
Machine learning is a tool and the bad guys are using it
KPMG NZ’s CIO and ESET’s CTO spoke at a recent cybersecurity conference about how machine learning and data analytics are not to be feared, but used.
Seagate: Data trends, opportunities, and challenges at the edge
The development of edge technology and the rise of big data have brought many opportunities for data infrastructure companies to the fore.
Popular Android apps track users and violate Google's policies
Google has reportedly taken action against some of the violators.