Compliance & Legislation

APRA CPS 234: An Overview of the Cyber Security Standard and How to Apply it

The Australian Prudential Regulation Authority (APRA) regulates Australia’s financial services industry and, as such, has responsibility for compliance and governance over all aspects of the finance industry. This is a wide and complex remit, since financial services cover a wide range of specific business types, so when they announced their draft standard for cyber security last week, APRA CPS 234, it immediately begs the question, how can it be applied?  

Read More

6 ways Data Breach Notifications will improve IT Security Operations

As the GDPR deadline looms there are still programmes and projects underway in many organisations to achieve compliance – both private and public sector.  It is easy to characterise GDPR and its requirements (including for data breach notifications) as a boon for consumers and a challenge for businesses or a marketing opportunity for consultants and lawyers and a life sentence for security teams.

Read More

GDPR Data breach notification services: 9 questions to ask service providers

When organisations investigate their obligations under GDPR one of the most significant challenges is the mandatory nature of the breach notification process. Organisations have 72 hours to inform regulators and notify data subjects as soon as possible thereafter. This blog look at some key considerations when researching GDPR Data breach notification service providers.

Read More

GDPR data breach notification – Get a grip on the technicalities

One of the most hotly talked about requirements of the EU GDPR is the need to notify the authority within 72 hours of when a data breach is detected (in the UK this is the ICO – www.ico.org.uk). This requirement for data breach notifications is not unique to the EU, GDPR is supra-national so it applies to all organisations that process the data of EU citizens.  Additionally, other countries have, or are planning, similar rules to mandate. The UK will have to implement equivalent rules after Brexit in order to continue to exchange information with the EU; but countries like Australia have also set out their own mandatory data breach notification requirements which are similar to the EU.

Read More
1 2 3 4 5