The European Union’s (EU) General Data Protection Regulation (GDPR) came into force on May 25, 2018, and has implications for many Canadian organizations, particularly those controlling or processing personal information in the EU or of its EU data subjects (any person whose personal data is being collected, held or processed).
Insights
Today’s organizations rely on information technology (IT) as a crucial part of their overall enterprise strategy. As such, policies and practices that extend to IT are an integral part of this strategy- that is, IT should be governed by practices that help ensure: An organization’s IT resources are utilized responsibly; Risks are managed appropriately; andRead more
The major credit card issuers (Visa, MasterCard, Discover and American Express) created PCI (Payment Card Industry) compliance standards to protect personal information and ensure security when transactions are processed utilizing a payment card. PCI provides the guidelines to help merchants protect cardholder data. What Does PCI DSS Compliance Mean? In security terminology, it implies thatRead more
IT governance is the method by which decisions are made around IT investments. Establishing IT governance in an organization is an important way of ensuring that IT policies and procedures are adhered to. Below are 8 Steps to establishing IT governance in an organization. 1. Outline Your Organization’s Course on IT Governance In this firstRead more
