Important Articles in GDPR

Article 33 – Notification of a personal data breach to the supervisor authority

Article 25 – Data protection by design and by default

Article 32 & 24 – Security of processing and responsibility of the controller

Article 5 – Principles relating to processing of personal data

Article 39 – Tasks of the data protection controller

Article 48 – Transfer or disclosures not authorized by Union law

Article 35 – Data protection impact assessment

Read Full Post »

7 Layers of Security Controls

Assets – The data associated and need to protect

Data Security – Protects the storage and transfer of data

EndPoints Security – Protect connection between devices and network

Application Security – access to application, access to network and Internal security

Network Security – Protect organization network from unauthorized network

Perimeter Security – Controls include physical and digital security methodologies

Human Layer – Access management controls and protect mission critical assets from human threats

Read Full Post »