WADIFF Consulting

Turning compliance requirements into ways to improve a Business | ISO27001 | Information and Cyber Security | GDPR | Data Governance

Search for:

GDPR for SMEs
- The GDPR Principles
- GDPR resources for SMEs
Solutions
About
Get in touch
Blogs
Resources

Category: A.14.2.5 Secure System Engineering Principles

April 25, 2018April 25, 2018 by Ian Grey

Password protecting your Word, Excel, PowerPoint and PDF files #MSOffice

A discussion about security measures with an SME I have been working with highlighted the need to provide some tips on how to protect files. They wanted to add passwords but were not sure of the best way to do this. So here is the way to do it in MS Office applications for Office365.… Read More

A.14.1 Security requirements of information systems, A.14.2 Security in development and support processes, A.14.2.5 Secure System Engineering Principles, A.18.1.3 Protection of records, A.18.1.4 Privacy and protection of personally identifiable information, A.7.2.2 Information security awareness, education and training Information Security, Passwords Leave a comment

June 22, 2017June 23, 2017 by Ian Grey

Wetherspoons stop monthly newsletters – GDPR related?

This morning I received an email from Wetherspoons – I am a customer and did sign up to receive updates – saying they will no longer be sending emails as many consider this intrusive. I agree that some people can find this intrusive, but at the same time think this could be part of their General… Read More

A.12.6.1 Management of technical vulnerabilities, A.14.1 Security requirements of information systems, A.14.2.5 Secure System Engineering Principles, A.18.1.4 Privacy and protection of personal identifiable information Email, GDPR, Information Security, Marketing Leave a comment

October 4, 2016February 21, 2017 by Ian Grey

Perception vs Reality of cyber crime

Would you consider your house as secure if it had been broken into in the past year, and the police had not caught the gang that was breaking into most of the other houses on your street? Probably not. Compare this to businesses and cyber crime. A recent report indicates there is a disconnect between the reality… Read More

A.12.2.1 Controls against malware, A.12.3.1 Information backup, A.12.6.1 Management of technical vulnerabilities, A.13.1.2 Security of network services, A.14.1 Security requirements of information systems, A.14.2 Security in development and support processes, A.14.2.5 Secure System Engineering Principles, A.18.1.3 Protection of records, A.18.1.4 Privacy and protection of personal identifiable information, A.6.2.1 Mobile device policy, A.7.2.2 Information security awareness, education and training, A.8.2.1 Classification of Information Cyber Crime, Cyber Security, Data Protection, Identity theft

August 2, 2016December 27, 2017 by Ian Grey

The SMEs guide to the General Data Protection Regulation (GDPR)

The General Data Protection Regulation (GDPR) will replace the Data Protection Act (DPA) in May 2018. The headline-grabbing impact of the GDPR are the fines; up to €20m or 4% of global turnover (whichever is the higher) depending on the scale of the issue you have with personal data. But it also presents OPPORTUNITIES; to improve… Read More

A.14.2 Security in development and support processes, A.14.2.5 Secure System Engineering Principles, A.18.1.3 Protection of records, A.18.1.4 Privacy and protection of personal identifiable information, A.7.2.2 Information security awareness, education and training, A.8.1.3 Acceptable use of assets, A.8.2.2 Information Labelling and Handling Data Protection, GDPR

June 14, 2016February 21, 2017 by Ian Grey

Apple and Differential Privacy – is it different and is it private

Apple has announced that iOS10 will use ‘differential privacy’ to maintain the privacy of the data is collecting. Apple SVP Craig Federighi said that the ‘…great work in iOS 10 would be meaningless if it came at the expense of your privacy’. I will admit that I had not come across Differential Privacy before so… Read More