Information Security

The Issue

Everyone knows that they need to keep their own personal data secure, they may also think to extend that to Intellectual Property, reputational, and other commercially sensitive data. You also know that you have to keep safe the same range of data that you hold on other people. But for compliance with GDPR you also need to collect, hold, and process it "appropriately".

In practice this means that you need to be clear about your intentions when collecting it, not breach those intentions, not let anyone take it from you (hacked), not lose it (ransomeware, human error, machine or service failure...), nor give it away by mistake (process error).

The Offering

CISSP Tranlowe will help you achieve increased stability and security of your data. Ranging from a review of how you handle sensitive data (including paperwork!), drawing up an Information Security Policy (with practical proposals on how to increase guideline compliance without stifling the performance of function), considering risks to the data, the vulnerability of the infrastructure, and hence the operational risks to the business itself.

This fits in particularly well with an IT Review/Health Check to jointly achieve the core security objectives of Confidentiality, Integrity, and Availability of the data upon which your business depends.

Alternatively, we offer information specifcally for GDPR.