↓

Insider Threats and Accidental Disclosure: The Biggest Causes of Data Breaches?

2022-12-01T15:44:00+00:00By GRC World Forums

Much of the work of security professionals focuses on securing an organisation’s perimeter and keeping malicious actors out. But one of the most significant threats to privacy and security is accidental disclosure of data by employees. 

Unifying Privacy Management and Information Security Compliance: Building a Bridge to Improved Efficiency

2022-12-01T15:43:00+00:00By GRC World Forums

The work of privacy and security professionals looks quite different day-to-day. But these two disciplines share a lot in common, and there are areas where working in silos does not best serve the interests of employees, organisations or even users.

OT and IT: Differences, Controls, and Key Integration Points

2022-12-01T15:43:00+00:00By GRC World Forums

We all know IT - the laptops, phones, applications, and cloud applications we use at work and home, that manage information. Systems that run industrial systems – electric utilities, gas pipelines, water systems, and manufacturing plants – are Operational Technology (OT).

That’s The Way The Third-Party Cookie Crumbles: The Future of Online Marketing

2022-12-01T15:42:00+00:00By GRC World Forums

As a sector, digital marketing has long been beset by compliance issues and has been subject to a great deal of high-profile enforcement action. 

Who Would be a Chief Privacy Officer? Pressures, Workflow and Future Trends in the Role

2022-12-01T14:18:00+00:00By GRC World Forums

The role of Chief Privacy Officer (CPO) has existed since the early 90s, but CPOs have become increasingly commonplace as companies use more personal data in increasingly innovative—and sometimes risky—ways.

Security Lessons From the Year’s Biggest Hacks

2022-12-01T14:18:00+00:00By GRC World Forums

Every year, high-profile security incidents make headlines—and 2022 has been no exception. 

Managing Third-Party Risk: The Role of Data Protection and Privacy Professionals

2022-12-01T14:18:00+00:00By GRC World Forums

Organisations find themselves working with an ever-larger network of third-party companies. And much of the work of managing these third parties falls to privacy professionals: from preventing data breaches to drawing up data processing agreements and facilitating international data transfers.

Could Meta Really Pull Out of Europe? The (Unintended?) Consequences of International Data Transfer Rules

2022-12-01T13:31:00+00:00By GRC World Forums

Schrems II affected many companies’ ability to transfer data from the EU to the US. Meta has repeatedly stated that an order to stop transfers could force the company to stop offering Facebook and Instagram services in Europe.

Draft EU Legislation You Need to Know: AI Act, Cyber Resilience, Data Act and More

2022-12-01T13:31:00+00:00By GRC World Forums

The GDPR changed the data protection sector immeasurably. But other upcoming EU laws could be equally significant in other ways. 

Data Rights Management: Creating a Seamless, Efficient and Compliant Process

2022-12-01T13:30:00+00:00By GRC World Forums

Data subjects are becoming increasingly aware of their data rights (Article 15) through to automated individual decision-making (Article 22). The challenge is, how do data controllers continue to meet the increasing demand for such requests.

What is ESG, how does it work and why is privacy such a key driver for Trust and the shareholder community

2022-12-01T13:30:00+00:00By GRC World Forums

Bridging Borders: How to Manage International Data Transfers

2022-12-01T13:30:00+00:00By GRC World Forums

Personal data can be an organization’s most valuable, but also riskiest type of data. This data is governed by an ever-evolving regulatory landscape as reflected by the complexity of managing cross-border data transfers. Most recently the Schrems II case which has highlighted the direct conflict between US surveillance law and EU data protection.