Project:
Managed the delivery of Pre 25th May GDPR-compliance deliverables and the GDPR Improvement Stage 1 (post 25th May deliverables that takes the bank to a targeted level of maturity)
Result:
Decrease Risks:
The bank can pinpoint where PII is being stored on the in-scope system/drives as well as determine the supporting processes and technologies against a defined control framework. This knowledge will help plan and execute remediation strategies, such as deciding whether to encrypt, archive or delete the data to prevent misuse or duplication of data elsewhere. Securing regulated data can help prevent data breaches. In addition, they can prove to auditors (and regulatory bodies if required) that controls exist for identifying and reporting on all PII collected. It also reduces the risk of data loss/breaches as the bank’s record retention policy is enforced on in-scope systems
Better data security:
Having a GDPR compliant framework in place will extend the bank’s cybersecurity practices for example:
– Increased security and governance on external communications
– Personal data specific Data Loss Prevention rules and Policy Tips for email to mitigate data leakage
– Enhanced permissions, least privilege and security model for DSX (document management system)
Better alignment with evolving technology:
Migrating towards the latest technologies will allow effective management of growing demand for data
