|
All public and private organisations are legally obliged to protect any personal information they hold. This applies equally to manual records as well as computer files.
PEM IT Services advises organisations on how to protect the data they hold, carrying out risk assessments and providing practical help to ensure compliance.
|
|
Do I need to Register under the Data Protection Act? |
 |
 |
|
One of the most frequent questions we get asked is whether an organisation needs to notify the Information Commissioners Office (ICO) and register under the Data Protection Act.
As the ICO's website makes clear - "Notification is a statutory requirement and every organisation that processes personal information must notify the Information Commissioner's Office, unless they are exempt. Failure to notify is a criminal offence."
|
|
Read more...
|
|
IT Risk Management Review |
|
|
|
The information created, processed, and used by your business is one of its most valuable assets. The disclosure, compromise or unavailability of this asset can severely impact a company, constitute a breach of laws and regulations, and negatively affect your brand name.
If you are not sure what risks your organisation faces or how well you are protecting against those risks, a risk assessment is the place to start.
Risk Assessments from PEM IT Services
Based on the ENISA methodology our risk assessments involve four simple steps:
- Finding the appropriate risk profile for the organisation
- Identifying the assets (applications, systems, network and people)
- Selecting the relevant controls and checks
- Implementing the correct policies
From this process you get three important services. Advice on the risks that your organisation faces. An assessment of how well you are currently protecting against those risks. And a gap analysis to show what you need to do to address any issues.
Give PEM IT Services a call on 01223 728 205 to find out how we can help you manage your risks and protect your data. |
|
|
