While the European Union General Data Protection Regulation (EU GDPR) continues to make headlines for its requirements and the looming California Consumer Protection Act (CCPA) approaches, there are many other reasons to have program-level documentation to demonstrate how cybersecurity and privacy principles are designed and implemented by default. It goes beyond compliance and is just good business practice.
When you "peel back the onion" and prepare for an audit, there is a need to address "the how" for certain topics, such as how Security by Design (SbD) and Privacy by Design (PbD) principles are managed. While policies and standards are designed to describe WHY something is required and WHAT needs to be done, many companies fail to create documentation to address HOW the policies and standards are actually implemented. We did the heavy lifting and created a program-level document to address this need and the Secure Engineering & Data Privacy (SEDP) is that solution.
If you can use Microsoft Word and Excel, then you can perform both Security by Design (SbD) and Privacy by Design (PbD) by simply following the instructions and editing the template to suit your specific requirements. While this is a template, we did the hard work of creating the formatting, bringing together the correct scope of information that needs to be addressed!
|
Operationalize Security by Design (O-SbD) |
Operationalize Privacy by Design (O-PbD)
|
|
Security by Design (SbD) requirements come from numerous sources. In this context, the most important are:
|
Privacy by Design (PbD) requirements come from numerous sources. In this context, the most important are:
|
The Secure Engineering & Data Privacy (SEDP) product is designed to support your company’s existing policies and standards. Our solution is focused at the procedural and guideline levels.
ComplianceForge
Data Privacy Program (DPP) - Editable Privacy Program Template Product Walkthrough Video This short product walkthrough video is designed to give a brief overview about what the DPP is to help answer common questions we receive. What Is The...
ComplianceForge
Secure Engineering & Data Privacy Product Walkthrough Video This short product walkthrough video is designed to give a brief overview about what the SEDP is to help answer common questions we receive. What Is The Secure Engineering...
ComplianceForge
Cybersecurity & Data Privacy Control Validation Testing Product Walkthrough Video This short product walkthrough video is designed to give a brief overview about what the IAP is to help answer common questions we receive. What Is The ...
ComplianceForge is very pleased to announce it is now a Secure Controls Framework Licensed Cont...
The NIST Cybersecurity Framework (NIST CSF) is commonly used “cybersecurity best practice” for organ...
Cybersecurity Supply Chain Risk Management (C-SCRM) is the process of identifying, assessing and mit...
Determining the scope of controls (e.g., assessment boundary) is different than determining control...
