What Proof of Compliance will GDPR Regulators be Looking for?

Have you done all the right things to fulfill GDPR requirements?

GDPR stands for General Data Protection Regulation, the most comprehensive overhaul of European data protection rules in over twenty years.

As of May 25th, 2018, non-compliant organizations face fines of up to 4% of their global annual revenue if they are unable to demonstrate they are GDPR compliant in the event of a breach to EU citizen privacy data. In the video, Hadi Hosn, Global Consulting Solutions Lead, shares some of the key things regulators will be looking for from organizations they audit or suffering a breach to their data.

Transcript:

So the proof that regulators are looking for to ensure organizations are doing the right thing, it really depends on how the regulators engage with the organization. It could be either that they would proactively come in to the organization to assess them and make sure they're in line with GDPR requirements, or reactively, they've come in based on a breach that the organization has had to personal data. The regulator is looking for proof that the organizations board is aware of GDPR and is aware of the personal data risks. They need to ensure that the organization has assessed the scope of GDPR within that organization.

The regulator also needs to prove that the organization has carried out an exercise to know what personal data they have, where it's going and what kind of entities and parties are accessing that data. Whether it’s internal teams, or it's third parties and vendors that are partnering with that organization. And then it's about that controls that the organization has implemented. Whether it's inscription or masking or monitoring, detection and response controls. And this depends on the risk profile the organization has accepted.

So whether it's monitoring detection and response controls that organizations have implemented. GDPR is a risk-based framework. It's a risk based regulatory framework and the organizations have the ability to choose the right controls for the risk profile, as long as they can justify those controls to the regulator, when they come knocking on their door.

We generate around 2 billion events each month. With Secureworks, we are able to crunch down that number to 20-30 high fidelity alerts — and that makes my team's job much easier.

Sunil Saale, Head of Cyber and Information Security, Minter Ellison

With Secureworks Taegis ManagedXDR, I have the peace of mind that my environment is being monitored 24x7 and if a threat actor tries to attack Secureworks will alert me, quickly investigate, and collaborate to fully resolve before damage can be done.

Jerry Ryan, VP of IT, We Florida Financial

Why Secureworks?

Secureworks (NASDAQ: SCWX) is a global cybersecurity leader that protects customer progress with Secureworks® Taegis™, a cloud-native security analytics platform built on 20+ years of real-world threat intelligence and research, improving customers’ ability to detect advanced threats, streamline and collaborate on investigations, and automate the right actions.