FRAMEWORK / GDPR

Make data protection visible in daily operations.

Make data protection visible in daily operations.

Connect security controls, data protection responsibilities and demonstrable operational practices.

FRAMEWORK / OPERATING MODEL

DEFINE

SCOPE + PRIORITIES

OPERATE

OWNERSHIP + CONTROLS

EVIDENCE

PROOF + REVIEW

STATUS

ACTIVE

01 / DEFINE

Define what matters.

Identify personal-data processing, risks, responsibilities and relevant security requirements.

02 / OPERATE

Turn requirements into operating controls.

Embed access, retention, incident and vendor practices into normal operations.

03 / EVIDENCE

Make operation demonstrable.

Maintain records demonstrating how security and data-protection responsibilities are carried out.

ILLUSTRATIVE CONTROLS / DEMO

CONTROL

OWNER

EVIDENCE

STATE

DP-01

LEGAL

AVAILABLE

READY

AC-02

IT

AVAILABLE

READY

VR-03

PROCUREMENT

REVIEW

OPEN

CONTROL / DP-01

OWNER / LEGAL

EVIDENCE / AVAILABLE

STATE /

READY

CONTROL / AC-02

OWNER / IT

EVIDENCE / AVAILABLE

STATE /

READY

CONTROL / VR-03

OWNER / PROCUREMENT

EVIDENCE / REVIEW

STATE /

OPEN

START / SECURITY ASSESSMENT

Turn framework requirements into an operating program.

Start with a structured assessment of scope, controls, ownership and evidence.

Book a Security Assessment