LONE WORKER PROTECTION
DATA PROTECTED?
Chris Allcard, Lone Worker Services Director at Reliance Protect, explains the benefits of ISO 27001 certification and how it demonstrates that a lone worker services provider operates to the highest possible standards.
The security of personal information has never been a hotter topic and since the introduction of the General Data Protection Regulation (GDPR) all organisations need to implement strong operational policies to keep it safe.
The volume of global data has increased exponentially over the last decade and as we head further into the fourth industrial revolution this trend is set to continue. In fact, Cisco has predicted that by 2022 data traffic will have increased threefold when compared to 2017, while an EMC and IDC Digital Universe study stated that this year about 1.7MB of new information will be created every second for each person on the planet.
RULES AND REGULATION The use of data is now deeply entrenched into
business processes. However, to prevent the abuse and mismanagement of it, GDPR has given citizens more control and any organisation that operates in the European Union (EU) must now implement a data protection policy that encompasses access, secure storage and destruction.
If it meets the criteria of personally identifiable information then GDPR compliance is required. Depending on the seriousness of the breach, the GDPR gives data protection agencies the power to impose financial penalties of up to 4% of an organisation’s annual turnover.
STANDARD BEARER Organisations now have a clear incentive to implement
appropriate technical and organisational measures to ensure a level of security appropriate to any risk(s),
20
and companies that offer lone worker protection and alarm receiving centre (ARC) services must therefore be able to demonstrate to customers that their data is protected, accessible and stored securely. This includes protection from cybercriminals attempting to gain access to sensitive information, as well as from data loss due to power outages, vandalism, theft, terrorism, fire, natural disasters and other external events. It also includes provision of processes to negate the effects of ‘human error’ when handling and transmitting data.
The most effective way to do this is via certification to ISO 27001 – the international standard for information security management systems (ISMS). ISO 27001 has been adopted globally with over 35,000 certificates issued and provides a comprehensive framework that enables the continued accessibility, confidentiality and integrity of information, as well as legal compliance, continual improvement, and corrective and preventive action. It comprises a six-part planning process – define a security policy, define the scope of the ISMS, conduct a risk assessment, manage identified risks, select control objectives and controls to be implemented, and prepare a statement of applicability.
LEADING THE WAY ISO 27001 is, simply, the most rigorous standard of
its kind. For instance, although the UK government’s Cyber Essentials scheme has a positive role to play in mitigating common internet-based threats, ISO 27001 covers cybersecurity, physical security and everything in-between. Certification is tough to achieve and requires real commitment throughout all aspects of a company’s operation – for example, Reliance Protect
www.tomorrowshs.com
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44 |
Page 45 |
Page 46 |
Page 47 |
Page 48 |
Page 49 |
Page 50 |
Page 51 |
Page 52
