Compliance

Companies are facing increasing government and industry scrutiny about how they handle sensitive data. Many of our clients need assistance with solutions that strengthen their compliance with relevant regulations for their industry and the countries they operate in.

A few compliance examples are:

General Data Protection Regulation (GDPR): The European Union’s privacy laws for any organisation handling the data of European citizens.

PCI-DSS: The global credit card industry security standard which applies to ANY organisation that accepts, transmits or stores cardholder data.

HIPAA: The US government standard to ensure the privacy of individually identifiable health information.

Notifiable Data Breach Scheme (NDB): The Australian government scheme to ensure the privacy of Australian citizens. We can audit against the government’s recommended ‘Essential Eight‘ cyber security mitigation strategies.

The penalties for non-compliance can be steep. For example, GDPR fines can reach up to €20 million or 4% of global annual turnover, whichever is highest. Non-compliance fines and enforcements for other countries and industries can be equally eye-watering.

We can help you gain a better understanding of your information systems and their dependencies – and implement both technical and business security solutions to help ensure regulatory compliance and safeguard against attacks.