Data Breach Management Training Course

Who is it for:

Anyone who is involved in the areas of information security and information assurance.

What will I learn:

Candidates should be able to demonstrate:

• How the management of information risk will bring about significant business benefits.
• How to explain and make full use of information risk management terminology.
• How to conduct threat and vulnerability assessments, business impact analyses and risk assessments.
• The principles of controls and risk treatment.
• How to present the results in a format which will form the basis of a risk treatment plan.
• The use of information classification schemes.

This course is for anyone who needs to understand data protection and GDPR in particular.

At the end of the course candidates should be able to:

• Hold a recognised qualification in data protection.
• Gain an understanding of the key changes that the GDPR and the Data Protection Act (2018) bring to data protection.
• Gain an understanding of the new rights available to data subjects and the implications of those rights with the GDPR and Data Protection Act (2018).
• Gain an understanding of individual and organisational responsibilities under the GDPR and the Data Protection Act (2018), particularly the need for effectiveness record keeping.
• Gain an understanding of the increased obligations faced by data controllers and data processors as a result of the GDPR coming into force and the Data Protection Act (2018) being enacted.
• Be better placed to support their organisation in processing customer data in compliance with the GDPR and the Data Protection Act (2018).

Who is it for:

• Anyone who has some existing responsibility for data protection within their organisation.
• It’s also useful for those who want to broaden their basic understanding in this area and fully understand the practical applications of data protection laws.
• Whilst this certificate is written to the UK Data Protection Act, many other jurisdictions have enacted broadly similar data protection laws, so international candidates may also find this useful.

What will I learn:

Candidates will be able to:

• Gain an understanding of the key changes and the associated implications that the GDPR and the UK Data Protection Act 2018 introduce to data protection.
• Gain an understanding of individual and organisational responsibilities under the GDPR and the UK Data Protection Act, particularly the need for effective record keeping.
• Be able to apply the new rights available to data subjects and understand the implications of those rights.
• Be able to demonstrate an understanding of the designation, position and role / tasks of a data protection officer.
• Be able to prepare organisations to manage and handle personal data in compliance with the GDPR and the UK Data Protection Act.

There is a need to provide adequate training on the Data Protection Act 1998 "the Act" and its implications for both organisations and individuals. There are important differences between the Act and its predecessor, the Data Protection Act 1984. In particular, the Act contains important new obligations in relation to manual records and transborder data flows, a new notification system and amended principles. It is important to understand the Act in the European context.

Those experienced in data protection issues, as well as those new to the subject, need to be trained so that their organisations are confident that legal compliance is continually addressed. It is necessary to identify issues requiring expert data protection advice in good time in order that organisational reputation and credibility are enhanced through relevant data protection policies and procedures.

Objectives

The aim of the syllabus is to promote an understanding of how the data protection principles work rather than simply focusing on the mechanics of regulation. The syllabus places the Act in the context of human rights and promotes good practice within organisations. On attaining the certificate, award holders will possess:

• appreciation of the broader context of the Act
• understanding of the way in which the Act and the Privacy and Electronic Communications (EC Directive) Regulations 2003 work a broad understanding of the way associated legislation relates to the Act an understanding of what has to be done to achieve compliance a recognised qualification in data protection

Course Synopsis

The syllabus comprises three main parts, each with many sub-sections!

Context - this will address the origins of and reasons for the Act together with consideration of privacy in general. Law – Data Protection Act - this will address the main concepts and elements of the Act and subordinate legislation. Application - this will consider how compliance is achieved and how the Act works in practice.

This instructor-led, live training in Malta (online or onsite) is aimed at supply chain professionals who wish to establish effective control and oversight of their supply chain, especially as it relates to cybersecurity.

By the end of this training, participants will be able to:

• Understand the security oversights that can bring about significant damage and disruption to a supply chain.
• Break down a complex security problem into manageable and actionable parts.
• Address common supply chain vulnerabilities by analyzing high risk areas and engaging with stakeholders.
• Adopt best practices in securing a supply chain.
• Noticeably reduce or eliminate the biggest risks to an organization's supply chain.

This is an Instructor led course, and is the non-certification version of the "CDP - Certificate in Data Protection" course

Those experienced in data protection issues, as well as those new to the subject, need to be trained so that their organisations are confident that legal compliance is continually addressed. It is necessary to identify issues requiring expert data protection advice in good time in order that organisational reputation and credibility are enhanced through relevant data protection policies and procedures.

Objectives:

The aim of the syllabus is to promote an understanding of how the data protection principles work rather than simply focusing on the mechanics of regulation. The syllabus places the Act in the context of human rights and promotes good practice within organisations. On completion, you will have:

• an appreciation of the broader context of the Act.
• an understanding of the way in which the Act and the Privacy and Electronic Communications (EC Directive) Regulations 2003 work
• a broad understanding of the way associated legislation relates to the Act
• an understanding of what has to be done to achieve compliance

Course Synopsis:

The syllabus comprises three main parts, each sub-sections.

• Context - this will address the origins of and reasons for the Act together with consideration of privacy in general.
• Law – Data Protection Act - this will address the main concepts and elements of the Act and subordinate legislation.
• Application - this will consider how compliance is achieved and how the Act works in practice.

Data Protection Impact Assessment (DPIA) is a mandatory risk assessment process under GDPR and other data protection laws, aimed at identifying and mitigating risks to individuals' personal data in high-risk processing activities.

This instructor-led, live training (online or onsite) is aimed at intermediate-level professionals who wish to understand and conduct DPIAs to ensure data privacy compliance and mitigate risks in data processing projects.

By the end of this training, participants will be able to:

• Understand the legal and regulatory context of DPIAs.
• Determine when a DPIA is required and how to scope it effectively.
• Conduct a full DPIA lifecycle from initiation to documentation and review.
• Integrate DPIA practices into broader data governance frameworks.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation using real-world scenarios.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

This one-day course is for people looking for a brief outline of the GDPR – General Data Protection Regulations coming out May 25, 2018. This is ideal for managers, department heads, and employees who need to understand the basics of the GDPR.

This course is developed primarily with focus on auditors and other administrative roles who are
tasked to ensure compliance of their control systems and IT environment with prevailing laws and
regulations. The course will begin by giving understanding of key GDPR concepts as well as how it is
going to affect the work performed by auditors. Participants will also explore data subjects rights,
data controllers and processors obligations, and enforcement and compliance notions in the
context of the Regulation. The training will also cover the audit program provided by ISACA that will
enable auditors to review GDPR governance and response mechanisms as well as supporting
processes which can help manage the risk associated with noncompliance.

This is more in-depth and would be for those working a great deal with the GDPR and who may be appointed to the GDPR team. This would be ideal for IT, human resources and marketing employees, and they will deal extensively with the GDPR.

Description:

This is a 'Practitioner' course and leans heavily on practical exercises designed to reinforce the concepts being taught and to build the delegates' confidence in implementing business continuity management. The course is also designed to encourage debate, and the sharing of knowledge and experience between students.
Delegates will benefit from the practical and extensive experiences of ours trainers who are practicing business continuity management and ISO 22301:2019 specialists.

Delegates will learn how to:

• Explain the need for business continuity management (BCM) in all organisations
• Define the business continuity lifecycle
• Conducting business continuity programme management
• Understand their organisation sufficiently to identify mission-critical impact areas
• Determine their organisation's business continuity strategy
• Establish a business continuity response
• Exercise, maintain and review plans
• Embed business continuity in an organisation
• Define terms and definitions appropriate to business continuity

By the end of the course, delegates will have a detailed understanding of all the key components of business continuity management and be able to return to their work, making a significant contribution to the business continuity management process.

Purpose of the Training

• Acquainting the audience with systematized, comprehensive issues of the functioning of personal data protection on the basis of Polish and European law
• Providing practical knowledge about the new rules for the processing of personal data
• Presentation of the areas of the greatest legal risks in connection with the entry into force of the GDPR
• Practical preparation for independent performance of the duties of a Personal Data Protection Officer

Purpose of the Training

• Gaining practical knowledge on how to perform the tasks of the Inspector
• Gaining practical knowledge of how to audit and how to assess risk
• Providing practical knowledge about the new rules for the processing of personal data

This instructor-led, live training in Malta (online or onsite) is aimed at intermediate-level to advanced-level compliance officers, legal teams, and data protection professionals who wish to ensure their organization’s SAR process is efficient, compliant, and risk-free.

By the end of this training, participants will be able to:

• Understand the legal framework governing SARs.
• Process SARs efficiently while maintaining compliance.
• Identify exemptions and limitations under data protection laws.
• Handle complex SAR scenarios, including third-party data.
• Implement best practices for SAR documentation and response.

Veritas Backup Exec is a unified data protection solution for virtual, physical, and cloud environments.

This instructor-led, live training (online or onsite) is aimed at intermediate-level IT infrastructure professionals who wish to configure and manage Veritas Backup Exec to ensure secure, streamlined, and effective backup and recovery.

By the end of this training, participants will be able to:

• Understand Veritas Backup Exec architecture and features.
• Install and configure a backup solution using Backup Exec.
• Create and manage backup and restore jobs.
• Develop basic backup and recovery strategies.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.