Our Approach to GDPR Consulting and Audit
Initial kick-off
We sit with your team to understand your business processes and the environment to accordingly consolidate the scope.
Scope Definition
Our team will understand your business from the perspective of a Processor or Controller and define the scope for GDPR compliance.
GAP Analysis
Identify gaps in your organization’s security control, systems, and environment vis-à-vis GDPR requirements.
Awareness Training Program
We conduct an awareness training program to help your employees understand the GDPR compliance Regulation and its requirements.
Data & Asset Classification
Identify your sensitive personal assets, classify them, and create/update the Asset inventory.
Risk Assessment
Our team conducts a comprehensive Risk Assessment to identify weak areas that could be exploited and lead to an incident of the breach.
Risk Treatment
Our team helps you build strategies and appropriate Risk Treatment measures to help bridge gaps and strengthen security systems. We also assist you in developing and implementing a data breach management response that can blend with your existing Incident Response Plan.
GDPR Application Assessment
Our team assesses your application for confirmation to GDPR requirements such as Data Portability, User Consent, Effective UI design, etc.
User Training
Our team of experts will conduct User Training programs for all personnel covered in scope on their specific GDPR Compliance responsibilities. Training materials for future use shall be provided.
Documentation Support
Develop effective documentation for your organization as per GDPR requirements such as DPIA process, Privacy policy, Fair use policy, etc.
Policy Rollout Support
We will help you build and rollout effective policies and procedures for your organization, pertaining to GDPR Compliance.
GDPR Compliance Audit
After a reasonable gestation period, a separate team of experts conduct a Pre-assessment of your setup and ensure all measures are implemented.
Certification/Attestation
Once all controls are confirmed to be in place, we will be issuing a legally admissible "GDPR Compliance" Certificate for your organization.
Continual support
If required we can extend our continual support by offering you Managed Compliance Services to help your organization stay certified.
