The Business Exchange Swindon & Wiltshire Edition 34: Dec/Jan 2017/18 | Page 29

TECHNOLOGY GDPR and the Importance of Encryption By Gareth Johnson, CIS Like many businesses you’re probably becoming a bit snow-blind when it comes to the amount of information that’s being put out there concerning the General Data Protection Regulation (GDPR) at the moment and wondering how it all affects you? At its core is an attempt by the EU to drive better standards of cybersecurity to provide increased protection for the data of EU citizens being handled by firms. Of course, these things are rarely simple and there are various methods of encryption you might consider when moving towards compliance. However, are you aware that by using a Managed Services Provider (MSP) you could enjoy data protection that complies with all requirements of the GDPR and offers a complete portfolio of solutions solving key data protection issues at the endpoints? If you’re not sure what we mean by endpoints, let’s put this into context. After all, you wouldn’t attempt to run the door of your local nightclub yourself, you’d get the professionals in. So, why leave the security of data to chance if unsure of the methodologies? Especially when the punitive consequences faced could put you out of business. Using the MSP model when it comes to the GDPR means you can leave security in the hands of experts while you concentrate on generating revenue for your core business. We do this by assessing your exact organisational needs so that you are protected against risk that is directly relevant to you. In a nutshell, this means your data will be secured across file, folder, email, network and device with cloud-based encryption that will be hosted by us in our own military grade bunker. And what’s more, if you suffer a breach and are encrypted in this way you wouldn’t need to report it to the Information Commissioner’s Office when it comes to the GDPR. In addition, with clear mobile device management and cloud access control, data is locked down across devices at every level with real-time control and visibility as to who has access to what cloud services and to what extent. This prevents any unauthorised access to applications, devices or file types and stops ransomware in its tracks. CIS offers a full set of services encompassing all aspects of the GDPR. These include a GDPR Compliance Gap Assessment Tool, suite of security solutions, Cloud Hosting as well as data mapping and policy and process reviews. For those who need it they also offer a Data Protection Officer as a Service (DPOaaS) to support you through establishing these and if any breach should occur. For more information visit www.cisltd.com or email: [email protected] THE BUSINESS EXCHANGE 2017 29