Intelligent SME.tech Issue 14 | Page 41

intelligent

// FEATURE //

Managing and adhering to

DATA PROTECTION REGULATIONS

Data is key to successful business operations and is integral to helping organisations create competitive advantages . But businesses of all sizes must prioritise data protection for both compliance and security purposes . Here , JG Heithcock , GM , Retrospect , a StorCentric Company , and Ben Koppelman , Research and Innovation lead at CyberSmart , offer their advice on how best to address this challenge .

A

CROSS DIFFERENT COUNTRIES and regions , businesses have a myriad of data protection regulations they need to abide with .
From GDPR to POPI to the CCPA , it ’ s crucial that businesses know first and foremost how to keep their data – considered by many to be the ‘ new oil ’ – secure .
Intelligent SME . tech spoke to two experts who provided their advice on exactly how best to manage and adhere to data protection regulations .
JG HEITHCOCK , GM , RETROSPECT
After your people , data is the asset most directly tied to your organisation ’ s success . Data helps you identify opportunities and overcome challenges . Data helps you analyse and better serve your customers . Data helps you understand and compete in your market . And data helps you optimise your workforce and improve the employee experience ( EX ). And of course , data does so much more .
Bottom line , if you are not leveraging data to create competitive advantage and propel your business into the future , you are destined to become a business of the past .
Consequently , data protection has climbed the corporate priority ladder for organisations of all sizes . And while ensuring data protection is critical so that it is not lost , damaged , stolen , or held for ransom , it is also important in order to adhere to increasingly prevalent and stringent data protection regulations that apply equally to small businesses and multi-billion-dollar enterprises .
So , what ’ s an SME to do ? Clearly , most do not have the dedicated manpower or budgetary resources of their large enterprise competitors .
First , I would recommend an SME team with a professional consultant and / or channel partner that is highly experienced and offers a specific practice dedicated to helping SME clients understand and comply with data protection regulations obligations .
The consultant / channel partner ( reseller , VAR , SI , etc .) should provide services specifically aimed at creating and enabling the SME to execute a remediation plan that is focused on meeting legal and regulatory requirements , in the most efficient , non-disruptive and costeffective way possible .
Second , I would recommend that as the SME is working towards ensuring they are able to meet data protection regulations that they keep in mind that not all threats come from
JG Heithcock , GM , Retrospect , a StorCentric Company

KEEP IN MIND THAT NOT ALL THREATS COME FROM EXTERNAL BAD ACTORS AND THAT INTERNAL MALICIOUS THREATS SHOULD BE ADDRESSED AS WELL .
Intelligent SME . tech
. tech
41