The Data Protection Regulation is coming - is your business ready?

  Information management is an essential support process for nearly every company, yet it is unfortunately often overlooked in assessments related to operational reviews. Although the information management process is often one of a company’s most important key functions—ensuring the smooth operation of other processes—its risks are not often recognized. The EU’s new General Data Protection Regulation (GDPR) took effect in 2016 and will become mandatory 25.5.2018 after a two-year transition period. It sets strict requirements for the information security and data management processes of companies that process various types of personal data, and it requires that companies be able to demonstrate the existence and effectiveness of their internal risk assessment processes. Although the General Data Protection Regulation (GDPR) establishes many different rules and restrictions, its requirements are by no means impossible to meet. What is essential is that clear frameworks and guidelines are established for the company’s operations, staff, and information security practices, and that operations are examined from various perspectives. In addition to risk assessment, it is important to consider ensuring business continuity and providing staff with guidance on how to handle various problem situations.

If you’re wondering whether your company is taking various threats related to information security and information management seriously enough, we’d be happy to help. We’ll assess the current state of your company’s data management and information security processes, identify the necessary steps, and help you ensure that your company is ready for the future!