GDPR, data protection and cybersecurity
We protect the organisation’s data, systems and processes through compliance, security and risk prevention.
12
servicii incluse în această direcție de lucru
Toate pot fi livrate independent sau ca pachet integrat.
Ce include
01
GDPR consulting We interpret GDPR and national law for the organisation’s specific context.
02
GDPR audit and compliance assessment We check existing processing against the requirements and deliver a prioritised action plan.
03
Data protection policies and procedures We draft the privacy policy, internal procedures and documents for data subjects.
04
Data inventory and classification We identify what data exists, where it is stored, who accesses it and how long it is kept.
05
Risk assessment for personal data We assess the impact of high-risk processing (DPIA) and propose measures to reduce it.
06
Security incident management procedures We define the steps for detecting, containing, notifying and documenting incidents.
07
Information security policies We set the rules for using systems, passwords, devices and data.
08
IT security audit and assessment We test configurations, access rights and vulnerabilities of the infrastructure and applications.
09
Cybersecurity We put in place protection against attacks: firewall, updates and monitoring.
10
Access control and user management We configure roles, least-privilege rights and multi-factor authentication.
11
Backup and data protection We organise regular backups, checked and stored separately.
12
Business continuity and disaster recovery We prepare plans to resume work quickly after incidents or failures.
Pentru cine
Public institutions
Public institutions that process citizens’ data at scale.
Private sector
Companies that work with data of customers, employees or partners.
Civil society organisations
Organisations that handle sensitive data of beneficiaries.
Cum lucrăm
01
Assessment
An inventory of data, systems and gaps against the requirements.
02
Compliance plan
Measures prioritised by risk, with owners and deadlines.
03
Implementation
Documents, technical configuration and team training.
04
Monitoring
Periodic checks, updates and support during incidents.
Ce obții
Concrete deliverables, handed over with documentation and training, that the organisation can use from day one.
-
Register of processing activities and data inventory - A complete set of policies and procedures
- Technical security measures configured and tested
- A trained team and an incident response plan
Alte direcții de lucru
Digital transformation and consultingStrategy, audit, terms of reference ↗ 
Project management and implementationPlanning, coordination, launch ↗ 
Software development and digital solutionsApplications, CRM, integrations ↗ 
IT infrastructure, cloud and hostingCloud, servers, hosting, backup ↗ 
Process digitalisation and solutions for organisationsDocuments, workflows, portals ↗