ISACA Releases Guide to GDPR Implementation as May Deadline Approaches

The clock is ticking to organizations around the world that deal with European personal data, starting with the approval of the General Data Protection Regulation (GDPR), which requires implementation by May 25, 2018. GDPR confirms privacy as a fundamental right. Enterprises face various practical challenges in the implementation of GDPR within a short timeframe, given the broad scope of the new regulation. Rescue with practical guidance is the latest publication of ISACA, Implementing the General Data Protection Regulation.

The publication provides a practical picture of how organizations should address the challenge of achieving GDPR compliance by the May deadline. The guideline defines what a GDPR program entails - including identifying and classifying personal data, risk management, governance, internal controls and assurance, security and the management of data leaks. Furthermore, the guide provides insights on how the first GDPR program of an organization can be transferred to a complete data protection management system (DPMS).

"GDPR not only affects European organizations, but all organizations that deal with European data," says Matt Loeb, CEO of ISACA. "Companies with a solid governance structure will benefit from the implementation of the regulation, while others may find it more difficult to achieve compliance, regardless of where your organization stands, ISACA offers numerous tools to guide organizations in adapting to these high-impact regulations. "

ISACA recommends the COBIT® 5 framework to maximize effectiveness and efficiency when implementing GDPR. This framework is a proven basis for GDPR projects in both commercial and non-profit companies.

In the coming months, ISACA will provide additional resources to assist its global professional community in preparing for GDPR, including a set of free GDPR-focused webinars:

20 February 2018 - Where do cyber risks and GDPR compliance meet?
21 February 2018 - Implementation of GDPR
February 27, 2018 - GDPR - What you do not know can hurt you

Members can earn one CPE by going to each webinar. More information and full webinar lists can be found at www.isaca.org/webinars.

The latest book is available to members for $ 25 / $ 50 for non-members and can be purchased at www.isaca.org/implementing-gdpr.

For additional guidelines on privacy and GDPR, ISACA recommends:

Impact assessments of GDPR data protection
Approval of GDPR with COBIT 5
Implementation of a privacy protection program: use of COBIT 5 enablers with the ISACA privacy principles:
ISACA Privacy Principles and Program Management Guide .

CISM Dumps Question No 4

Question No 4:

The PRIMARY goal of a risk analysis is to:

A. Identify the threats to IT assets
B. Implement cost-effective controls
C. Prioritize risks
D. Determine the cost of insurance coverage

Answer: C

CISM Dumps Question No 3

Question No 3:

Which of the following BEST describes information security governance?

A. Legal requirement for information security
B. Technical countermeasures used to manage security risk
C. Role of the information security manager
D. Process of measuring and managing security outcomes

Answer: D

CISM Dumps Question No 2

Question No 2:

The PRIMARY objectives of information security governance is to:

A. Ensure that policies and procedures are followed
B. Give the security manager the required authority for implementation
C. Assure regulators that security is being addressed by the company
D. Give assurance to the board that security is being managed adequately

Answer: D

CISM Dumps Question No 1

Question No 1:

The primary advantage of implementing a decentralized information security management organization within a large multinational enterprise is that it:

A. Reduces the number of security incidents that each team member is assigned
B. Requires fewer security staff members at the corporate headquarters
C. Allows language and culture to flow up into corporate security policies
D. Allows for easier administration across the enterprise

Answer: C