GDPR solution
The General Data Protection Regulation (GDPR) is Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation), a European Union regulation aimed at significantly increasing the protection of citizens‘ personal data.
The solution takes into account the individual needs of the customer in relation to the GDPR, whether it concerns public offices, hospitals, schools or businesses. First, a differential analysis is carried out, and then organizational and technical measures are delivered and implemented in response to the outputs of this analysis.
The main features of the offered solution include identification and provision of measures to comply with the principles for the processing of personal data according to the GDPR, fulfilment of the obligations of the controller or processor and fulfilment of the rights of the data subject. The solution is based on generally accepted standards, frameworks and guidelines of ISO 27001, TOGAF, ITIL.
Provided services
Cyber security solution from the company TESCO SW a.s. consists of several parts, which tie in with one another:
1. Differential analysis
It maps the effects of Law on Cyber Security (LoCS) and Decree on Cyber Security (DoCS) on the customer’s IS in question. The analysis consists of a detailed analysis of LoCS and DoCS.
Identification of controller's duties
Product breakdown
Individual assignments
Migration plan or delivery schedule
2. Implementation of security measures
After approval of differential analysis, there follows a phase of executing organisational and technical security measures:
Safety documentation
Other documents
Supervision and security SW
Application SW
3. Provision of support services
The section provision of support services includes:
Professional capacities
Training
Certification
Measures
4. Security supervision
The Security Oversight section includes the following services:
Identification of controller's duties
Product breakdown
Individual assignments
Migration plan or delivery schedule
Reference projects
- The Office for Personal Data Protection
- Ministry for regional development of the Czech Republic
Technology
- HW: Thales e-Security nShield Connect
- SW: CryptoID, FaMa+ ITSM, Microsoft System Center Operations Manager