Archives

ISO

Happy third Birthday

For many new businesses, celebrating a happy third birthday is a key milestone. However, reaching three years is not easy to achieve. This week we celebrated our third birthday and we had the opportunity to sit and discuss what we did well and also what we did wrong....

ISO 27001 and GDPR Compliance

Anyone struggling with the EU GDPR (General Data Protection Regulation) should look no further than ISO 27001. It’s the international standard for information security. The ISO 27001 framework is close enough to the Regulation’s that many experts consider it a perfect...

GDPR Risk Assessments

Your business is required to comply with the GDPR (General Data Protection Regulation). Therefore you are obliged to conduct regular GDPR risk assessments. This isn’t just because the Regulation says that you should. Risk assessments are essential for...

DPIA (Data Protection Impact Assessment)

DPIA (data protection impact assessment) is a type of risk assessment designed to identify the risks affecting the security of personal data. A DPIA will help you understand the likely consequences of processing such data. Understanding what a DPIA is is all part...

What is an Information Security Policy?

It is well known that your people are the weakest part of your business security defences. You can spend a great deal of time designing processes to protect your business. You can then invest in state-of-the-art technology to detect threats. However, these will only...

Nursing home fined
Nursing home fined

Nursing home fined for a data breach after a laptop with residents' details is stolen A nursing home in County Antrim has been fined £15,000 for failing to adequately protect sensitive data about its staff and residents.  This story is a look back in history but...

ISO 27701 Readiness Assessment
ISO 27701 Readiness Assessment

Getting ready for an ISO 27701 certification with our readiness assessment, the new standard for Privacy Information Management ISO/IEC 27701 is the new international “gold standard” for privacy management. It is the companion standard for ISO 27001, the...

GDPR and the lawful bases for processing
GDPR and the lawful bases for processing

The GDPR states that you must identify a lawful basis before processing personal data. But what is a lawful basis for processing? Do you always need individuals’ consent to process their data? And what exactly are ‘legitimate interests’? You must understand your GDPR...

Rights under the GDPR
Rights under the GDPR

What are the data subject rights under the GDPR? The EU GDPR (General Data Protection Regulation) gives individuals eight rights relating to their personal data. You must let individuals know how they can exercise these rights, and meet requests promptly....

ISO 9001 Quality Management
ISO 9001 Quality Management

What is ISO 9001? Quality Management Systems (QMS) explained Companies and organisations are now expected to prove competency across an increasing number of disciplines in order to win contracts in both the private and public sector. A quality management system (QMS)...

ISO 27701 Privacy Information Management
ISO 27701 Privacy Information Management

ISO 27001 is the well recognised international standard for information security. A companion standard has now been added, this is ISO 27701. This page is a brief introduction to ISO 27701. It is the standard for Privacy Information Management. This page will discuss...

ISO 9001 Services
ISO 9001 Services

ISO 9001 is an ISO standard that seems out the criteria for quality management systems (QMS). This standard is based on a number of quality management principles including a strong customer focus, motivation and implication of top management, the process...

ISO 45001 Services
ISO 45001 Services

ISO 45001 is an ISO standard for management systems of occupational health and safety (OH&S), published in March of 2018. The goal of ISO 45001 is the reduction of occupational injuries and diseases, including promoting and protecting physical and mental...

ISO 45001
ISO 45001

ISO 45001 is the international standard for occupational health and safety at work developed by the International Standards Organisation that are independent of government. Introduced in March 2018, the new standard replaces the current standard (BS OHSAS 18001) which...

Pin It on Pinterest