Action plan
Sets out the priority actions identified by the analysis and the technical guidance for addressing the risks found.
Privacy in order
We verify GDPR compliance
GDPR Compliance (GDPR)
With the implementation of the GDPR (General Data Protection Regulation), the management of user data has radically changed for all companies based in Europe. For small and medium-sized enterprises, complying with the regulation can be challenging, and failing to implement personal data protection measures can lead to administrative or, in severe cases, criminal penalties.
For this reason, ISGroup offers a GDPR consulting service that analyses the measures adopted, assesses the effectiveness of the methods applied and supports the organisation's GDPR compliance journey with training activities.
Description
The GDPR Compliance service offered by ISGroup covers all relevant aspects of assessing a company's GDPR compliance. The ISGroup team can support companies in the process of analyzing and verifying GDPR compliance.
During this phase, personal data protection policies are analyzed to highlight potential critical points to prevent data breaches and protect against unauthorized access to sensitive data.
Non-compliance with GDPR indicates incorrect policies in personal data protection, which can lead to significant reputational damage and administrative or criminal penalties in cases of serious non-compliance.
The ISGroup team specializes in personal data processing and can analyze risk factors and suggest the best ways to protect company data.
Specifications
ISGroup's intervention for verifying GDPR compliance is divided into three main steps:
Risk Analysis
Data protection methods are evaluated, and potential risk factors that could lead to unauthorized access are highlighted.
During this phase, a thorough and detailed analysis of the policies and infrastructures involved in data management is conducted.
Risk Classification and Impact Assessment
Once the analysis is complete, the seriousness of the risks can be assessed through risk classification.
During this phase, scenarios where a risk factor can become a real threat to company data are evaluated. The goal of this process is to identify and mitigate the most severe risks.
Remediation Plan Drafting
Familiar with the infrastructure and data management risks, the ISGroup team can provide a remediation plan, an "action plan" to accurately and comprehensively correct and mitigate the risks present in the infrastructure.
GDPR journey documents and activities
The deliverables support the compliance journey within the agreed scope. Implementing the measures and fulfilling privacy responsibilities remain with the organisation.
Privacy documentation
Includes the policies and documents covered by the agreed scope, updated according to the evidence collected.
Training
Provides training materials or activities on the measures and responsibilities defined during the engagement.
Frequently asked questions about
GDPR Consulting
What does ISGroup GDPR consulting include?
GDPR consulting can include analysis of existing measures, review of data-protection policies, risk assessment and classification, definition of an action plan, documentation updates, and training. Scope, activities, and deliverables are defined in the proposal according to the organisation's context.
How is a GDPR review carried out?
ISGroup's GDPR review has three stages: risk analysis, risk classification with impact assessment, and preparation of the remediation plan. The first stage examines data-protection methods, policies, and infrastructure to identify factors that can lead to unauthorised access; the second assesses the seriousness of each risk.
Which documents do we receive after the activity?
Deliverables can include a remediation plan for identified risks, updated privacy policies, and training materials. The exact structure depends on the scope and activities included in the proposal.
Does GDPR consulting replace a DPO or legal adviser?
ISGroup GDPR consulting analyses measures, risks, documentation, and training; it does not include the DPO role or legal advice. Privacy responsibilities, legal opinions, and relations with authorities must be assigned to the competent parties. The proposal clarifies ISGroup's support scope.
What determines the cost of GDPR consulting?
The cost of GDPR consulting depends on the number and type of processing activities to review, the systems and policies involved, and the work required. The proposal may include risk analysis and classification, a remediation plan, privacy policy updates, and staff training.
Does the service guarantee GDPR compliance?
No, a single consulting activity does not automatically guarantee ongoing GDPR compliance. The service can analyse measures and risks and support action planning within the agreed scope. Compliance also depends on implementation, organisational responsibilities, and changes to processing activities.
Shape your security priorities into a tailored proposal