Barron Rosborough, 7/12/18 12:12 AM

河北20选5走势图表 Calculating the cost of GDPR compliance

The EU General Data Protection Regulation (GDPR) is unique in the field of compliance standards for its establishment of financial penalties for the loss or mismanagement of personal data of EU citizens. And those fines are higher and more likely to be assessed than any existing standard. Any company that does business with EU citizens (or controls or processes their personal data) is subject to fines calculated on three points:

  1. How much personal data of EU citizens has been mismanaged or lost
  2. What steps had been taken prior to the incident to avoid loss
  3. What steps were taken after a loss

If you handle little or no personal data of EU Citizens, you have well maintained, well documented and standard security processes in place and you take the compliance actions specified in the GDPR after discovering any data loss, then it will have little more impact on your company than the same loss anywhere else. Which isn't said to make little of how much a loss can cost.

Vulnerability Assessment, a pillar of the GDPR

VA is a key means of documenting that your security is up to snuff. The GDPR does not specify exact security requirements, but makes it clear that normal and usual security actions MUST be in place to be in compliance. VA as a security mainstay is in this category and scanning of infrastructure that collects, stores or transmits personal data is a must.

The EU GDPR compliance mandates that all organizations with access to Personally Identifiable Information of EU citizens take sufficient measures to ensure the security and privacy of their data. The GDPR will take effect on May 25, 2018 and it will run in parallel to other data protection directives. Compliance with SOX, HIPAA, ISO2700, etc. will help, but GDPR compliance has its own requirements, particularly regarding reporting. Wait a year to report a hack and you will pay a high price.

GDPR articles relating to Vulnerability Assessment

GDPR ArticleVulnerability Assessment RequirementArticle 32 (page52) Security of processing "1. ..... shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including inter alia as appropriate: ......,(b)the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services;VA measures and manages risk and ensures confidentiality, integrity and availability. When applied to processing systems, it can monitor systems against security policies, identify and track vulnerabilities and document corrective actions through log data.(d) a process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing.Vulnerability Assessment is the central technology for testing, assessing and evaluating the effectiveness of measures taken to harden network resources against attack.Article 39 (page 56) Tasks of the data protection officer "1. The data protection officer shall have at least the following tasks: ... (b) to monitor compliance with this Regulation, ..."VA provides reports which validate that appropriate security measures have been implemented and that action has been taken to mitigate vulnerabilities.Article 57 (page 68) Tasks “… each supervisory authority shall on its

territory: ... (h) conduct investigations on the application of this Regulation…Vulnerability Assessment reports provide details on asset inventory, identity and vulnerabilities. beSECURE provides a history of assets activity in log events for detailed investigations.Article 59 (page 70) Activity reports "Each supervisory, authority shall draw up an annual report on its activities, which may include a list of types of infringement notified and types of measures taken in accordance with Article 58(2). ..."The results from VA scans can be used to contribute to an annual report. Contributions would include validation of compliance.

Beyond Security is ready to help our customers meet the risk identification, testing and evaluation aspects of the provisions within GDPR that affect Data Controllers and Data Processors. Moreover, in addition to specific clauses in article 32, Beyond Security provides capabilities with assessing host discovery, preventive vulnerability management and GDPR compliance.

Using VA to prepare for GDPR compliance

In preparing to meet GDPR compliance requirements, organizations must observe a minimum set of security controls to avoid both penalties and loss of customer trust. Those related to and delivered by VA are:

    • Visibility of your IT environment which uncovers blind spots or shadow IT
    • Continuous and automatic updates combined with full remediation capabilities
    • Asset criticality rankings
    • Reporting with full support for GDPR compliance
    • Integration with your SIEM, ticketing system and other business-critical data

To attain GDPR compliance readiness, you need complete visibility into your IT assets through blind spot detection and an assurance that your applications are hardened against exploits and misuse. Beyond Security offers a complete product portfolio to help you address both known and unknown vulnerabilities hidden in your applications, assets and networks to meet any compliance challenge.

For more info on how Beyond Security's beSECURE will help your GDPR compliance, call, email or fill out the form on this page.

  • 游江:游江闲画——猫的心事 2019-04-20
  • 第二章 在土地革命战争中开辟农村包围城市的道路 2019-04-20
  • 我相信“交警雨中护送高考生”是真,“交警雨中护送高考生”反被该高考生家长投诉是假。 2019-04-19
  • 6个关键词 教你读懂最新癌症预防报告 2019-04-16
  • 湖南衡阳一科目三考场请高僧开光祈福被责令整顿 2019-04-14
  • 端午假期国内游客超8900万人次 2019-04-14
  • 40载情定广彩 终练就“国大师” 2019-04-13
  • 孙实的专栏作者中国国家地理网 2019-04-13
  • 信息网络传播视听节目许可证 2019-04-09
  • 中国经济充当了世界经济发展的火车头。但是,作为世界经济火车头的中国,在世界主要经济体股市都走牛的情况下,为何熊途漫漫?这种不正常的现象,背后是我们资本市场的投融 2019-04-09
  • 入梅,湖北防汛如何应对 2019-04-07
  • 南宁市启用新能源汽车专用号牌 2019-04-07
  • 以古鉴今,习近平多次提及屈原 2019-04-07
  • 一粒红枸杞 父子两代情 2019-04-04
  • 【惊坛投稿】帮你上头条!来给“一语惊坛”投稿,下一个头条就是你! 2019-04-03
  • 714| 726| 120| 986| 246| 253| 221| 81| 318| 915|