SLIDE 51 2017 2018 2019 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Extended Value Long Term Short Term Quick Wins Outcomes and plan based on Detailed Privacy Focused Assessment (privacy > security controls)
High Level Roadmap for Recommendations
51
Personal Data Inventory – structured, unstructured information / PII Continous Privacy by Design Data Minimization (Data Collection Limitation – legal check for minimum required data for customers) Data Consolidation E-mail Security, BYOD Security Incident & Event Management Extended encryption and data masking
Unlock value of current investment Sustained returns Strategic Outcomes High Impact ROI, Rapid TTV
Securing the most important information – structured, unstructured PII Start of Privacy by Design – short review of security parameters of new/old services
Strategic Tactical
Naming DPO (just in case it is not named yet) Preparation for possible data breach – be able to detect and report Detailed Privacy Focused Assessment (to fugre out detailed long-term plan even after May 2018) Justify client‘s facing areas (consent, front-end service, portals, etc.) Identity management deployment Application Security (portals, web security) Policies justifications, policy management Other extended-value controls Information Governance strategy
Executing what is urgent and should be a priority: Mapping the inventories, minimizing the data stored, securing main PII, starting Privacy by Design strategy Short-term activities which need to be done first: Activities needed to be executed by May 2018 to be ready and possibly safe from major breaches, fines, etc. Execution of a sensibly planned implementation programme: Further privacy and other security steps on a long-term journey towards safe and trusted IT environment. Enhancing the environment: Other controls such as securing email, BYOD and continuous Privacy by design are also very important.
