(WEBINAR ON DEMAND) Managing Risk for Privacy Teams
This Webinar took place on December 14th 2020 at 3PM GMT
This webinar highlights the importance of managing different types of risks to ensure privacy rights are protected. Our very own speaker, Co-founder and CISO Mike Morrissey, explains the three main types of risk: privacy rights risk, operational risk, and third-party risk, and emphasizes the use of a robust risk assessment model to manage these risks.
Mike also stresses the need for a centralized risk register and a risk scoring system. They suggest that collaboration with the business is crucial for effective risk management, and that understanding the risks posed by data held by marketing teams is particularly important. Finally, Mike notes that regulators are sympathetic to the journey towards compliance with data retention laws, and provides their contact information for further questions.
Topics of this event includes:
- The types of risks that privacy teams need to manage
- The importance of having a risk register and a baseline risk model with scoring
- The importance of identifying operational risks and using a standardized risk assessment model
- The importance of having a risk register to identify and categorize risks
- The importance of building a risk library and provides an example of an operational risk
- The risks posed by data that marketing teams have access to without a lawful basis
- The importance of collaborating with the business to ensure compliance with data retention laws
Reliable service, quick response to support cases, adapting the platform quickly to new privacy challenges. But the most valuable thing PE and people behind it, is the way of thinking, viewing and designing the solution. A design which make it easy to see all connections, easy to document and easy to demonstrate the compliance; PE makes DPO's life much easier, thank you PE!
Anwar Sulaiman
Data Protection Lead - SAAB
The PrivacyEngine functionality is constantly being reviewed and improved to keep up with current needs. It is effortless to navigate through the site and to use all the tools provided. It has proven to be a necessity in how hush manage and shape our responses to GDPR and data protection queries.
Channing Neale
Office Manager, Hush
An integral part of GDPR Compliance Strategy has been based on the adoptation and support of PrivacyEngine. The professional service by PrivacyEngine provides us with the confidence that our business is well informed and supported.
Sean O'Sullivan
Data Protection Lead - Harvey Norman