BSI: Compliance and the Art of Possible
•Download as PPTX, PDF•
0 likes•11 views
Executive Leaders Network: Finance, Procurement & HR Transformation Summit - May 2022
Recommended
Recommended
More Related Content
Similar to BSI: Compliance and the Art of Possible
Similar to BSI: Compliance and the Art of Possible (20)
More from Executive Leaders Network
More from Executive Leaders Network (20)
Recently uploaded
Recently uploaded (20)
BSI: Compliance and the Art of Possible
- 1. Copyright © 2022 BSI. All rights reserved. Greig Ferguson, Senior Data Protection Officer BSI Data Governance 26/05/2022 Compliance and the Art of Possible
- 2. Copyright © 2022 BSI. All rights reserved. Copyright © 2022 BSI. All rights reserved. ISC08801ENGX v1.0 Feb 2022 AIM To discuss ways of achieving data protection compliance whilst enabling the employee digital experience.
- 3. Copyright © 2022 BSI. All rights reserved. “…And lost in buckets.” Trust is built in drops…
- 4. Copyright © 2022 BSI. All rights reserved. Copyright © 2022 BSI. All rights reserved. Top 5 trends in HR ‘The art of possible’ 1. Hiring Technologies 2. Performance Management Systems 3. Employee Recognition Schemes 4. Hybrid Working Models 5. Artificial Intelligence (AI) in Employee Management
- 5. Copyright © 2022 BSI. All rights reserved. • The last 5 years have seen a significant rise in attacks on global HR infrastructure. • Not always a direct attack on staff. Invariably opportunistic in nature, however….. • Cybercriminals, with links to state sponsors are frequently involved. Threats and opportunities
- 6. Copyright © 2022 BSI. All rights reserved. Copyright © 2021 BSI. All rights reserved. How can HR departments adopt ‘Privacy by Design’? • Protecting an individuals fundamental rights must be front and centre in any innovation process within HR settings. • This is what Privacy by Design is, and what regulations like the GDPRs envisage with Data Protection by Design and Default.
- 7. Copyright © 2022 BSI. All rights reserved. • Embed compliance by design • Privacy by design is an approach that seeks to ensure protection for the privacy of individuals by proactively embedding privacy into the design and operation of network systems, infrastructure, and business practices and processes. • How? • Robust DPIA process. • Privacy checkpoints in any HR project lifecycle. • Seek guidance from Compliance or your DPO at an early stage! Making the Art of Possible Compliant
- 8. Copyright © 2022 BSI. All rights reserved. Copyright © 2022 BSI. All rights reserved. Privacy and Data Protection It’s important to remember that privacy laws are written by people who don’t know your business. A culture of privacy provides a shared understanding of how personal data can and should be used to support broader strategic objectives. • Privacy must be a board-level mandate. • Tailored training for staff, especially on DPIAs. • Targeted assessments of awareness. • Awareness campaigns to refresh, reinforce and sustain motivation amongst all staff.
- 9. Greig Ferguson M: +44 7702 840023 Greig.Ferguson@bsigroup.com Thank you
Editor's Notes
- Reputation is built on the trust that people and customers place in you. Who are the most trusted brands and companies in the world? Who do you trust in your life? Have you ever asked yourself why? Typically, and quite deliberately, brand focus is about building consumer, customer, stakeholder and societal trust. Then sustaining it. Think about your favourite pair of jeans. Or when you’re travelling (perhaps to Reading!) and seeing a familiar restaurant chain where you know you can get a sandwich that will taste just like you expect it to taste. Think about your communication devices, and the technologies you use that work the way you expect them to, when you need them to work. Building that trust is one thing. Sustaining that trust then is vital. But the threat landscape is as vast as the ocean-scape on this slide. All it takes is one incident. One negative connotation. One tiny speck of potential for a threat to be realised and all that marketing spend, the branding, the dependability and assurance can be lost. It doesn’t even have to be an actual incident. The potential of an incident can erode that trust almost instantaneously. And the likelihood of this occurring is higher than ever before in today’s information age. The proliferation of data, ease of communication and information sharing, the rise/scourge of social media, The scourge that is fake news/ disinformation, All this means it can be hard, if not impossible, to control the narrative. Even if nothing has actually happened.
- HRIS/ ATS HR Information Systems/ Applicant Tracking Systems – considerations DPIA/ IDTA streamline their entire hiring process from start to finish. Virtual interviews – Biometric data if recorded! 2. PMS Feedback from staff on how to improve – Google gives staff free meals, ‘generous’ paid holiday allowances, access to ‘nap pods’ for snoozing during the day, and space to grow their own fruit and vegetables at work. - Anonymous/ constructive feedback – DPIA +/- IDTA 3. ERS 93% of workers agreed that recognition embodies the meaning of their job (Globoforce Survey/ Workhuman) - again IDTA/ DPIA/ Opt-in 4. Hybrid Over half of remote workers access customer data using a personal device, yet 71% of security leaders lack high or complete visibility into remote employee home networks. This gap is well understood by bad actors, as reflected in the fact that 67% percent of business-impacting cyberattacks targeted remote employees. Considerations – LOTS, 2FA, DPIA, IDTAs (Tenable study September 2021) 5. AI AI enables HR teams to streamline employee experience, as a result, provide employees with more personalised training offerings and schedules adapted to their individual needs. AI Chatbot can talk about HR-related topics such as payroll, employee benefits etc.
- `The digital chaos that exists today is everywhere. It is relentless. It is unknown and introduces both threats to and opportunities for business, governments and data subjects the world over. LinkedIn – massive source of targeting information by criminals Wannacry – NSA/ NorthKorea HSE – Conti – Russia Threats this year – HIPAA - 4,367,135 records Jan – Mar in 99 incidents or 20 records per second! Based on this average, it is estimated that globally 150 records per second are compromised.
- This means adopting an approach to privacy and data protection that involves the consideration of privacy protecting measures that do not take away from the desired outcomes and improvements, but actually shape and advance them.
- Thank you