By implementing ISO/IEC 27001, your organization is deploying an information security management system (ISMS) that enables support by top leadership; organizational culture and strategy integration, with constant monitoring, updating and review capabilities. Your organization will be able to ensure that the ISMS adapts to changes - both in the external and internal business environment- as well as identifies and reduces risks through using a process of continual improvement.
Objectives of the Presentation
Why Should you Attend
- An overview of the GDPR
- The purpose of the GDPR
- Consequences of data breaches
- The reach of the GDPR
- How ISO/IEC 27001:2015 can help with GDPR compliance
- How to map ISO/IEC 27001:2015 to the GDPR
- ISO/IEC 27001:2015 implementation considerations
Although many businesses understand the importance of implementing the right procedures to detect, report and investigate a data breach in compliance with the GDPR, not many are aware of the benefits of implementing ISO/IEC 27001 standards compliant with an ISMS deployment. ISO/IEC 27001 permits an excellent starting point for achieving the technical and operational requirements necessary to assist in preventing a data breach under the GDPR.
In this webinar, information systems management expert Dr. Robert E. Davis, CISA, CICA will walk you through how to implement an effective ISMS configuration that can help you towards compliance with the new European Union regulations.
Who will Benefit
- An overview of the GDPR and how an ISO/IEC 27001-aligned ISMS can support compliance
- The primary risks associated with data breaches and critical actions in the event of a data breach
- The technical and organizational requirements to achieve GDPR compliance
- The benefits of implementing an ISMS
- Practical advice on how to improve your ISMS deployment congruent with the GDPR requirements
CISOs, Information Security Directors, Data governance and management professionals, Staff Attorneys, Privacy and Compliance Professionals, HR Professionals, Risk management professionals and Auditors tasked with compliance and risk transfer, DPOs, CIOs/CTOs, Internal Audit Managers and Staff, IT Security Officers, IT and Data Consultants and project managers involved in data protection, information security or cybersecurity issues.
Information is one of the most valuable and business-critical assets for any organization. In today's hyper-connected world, organizations are facing large-scale information security threats and destructive cyber-attacks. ISO/IEC 27001 certification confirms that your organization has appropriate controls in place to reduce the risk of serious data security threats and reduces the exploitation of vulnerabilities within your organization's systems.
Using an ISMS configuration can assist organizations, no matter the size and sector, in taking a systematic risk-based approach to managing and securing sensitive company data. ISO/IEC 27001 certification provides customers and other stakeholders with confidence that the organization's manager-leaders have implemented internationally accepted best practices.
The GDPR, which will apply from May 25, 2018, makes protection confidence even more pertinent. Although the GDPR does not mandate certification, ISO/IEC 27001 is a powerful way to demonstrate accountability and compliance. So while having ISO/IEC 27001 does not automatically make you compliant with GDPR, it is indeed putting the necessary structures in place to help you with compliance.