PIPL - Data Protection & Security, Data & Analytics, Cloud Services

1. Trusted Advisory Services
STRICTLY CONFIDENTIAL © Copyright 2014 Progressive Intelligence
USA • UK • INDIA
Progressive Intelligence
Partners in Achievement
9225 W. Jewell Place,
#101, Lakewood
Colorado 80227
USA
•
1245 Wild Rose Lane
Lake Forest
Illinois 60045
USA
•
333 Rector Pl, #908
New York
New York 10280
USA
•
4921 Waterfowl Way,
Rockville
Maryland 20853
USA
•
6143 Leesburg Pike, #607
Falls Church
Virginia 22041
USA
•
1st Floor, 19 Bracknell
Gardens, Hampstead,
London NW3 7EE
UK
•
B-18 Swasthya Vihar
Vikas Marg
Delhi 110092
INDIA
info@piplinc.com
Data Protection and Security
Risk, Mitigation, and Management
Legal & Operational Landscape
Dr. Sanjeev B. Ahuja
Managing Director
sanjeev.ahuja@piplinc.com

2. Overview
2
Data Risk
Exposure Mitigation
Event Management
Contact

3. Data Risk
3
Biographical
Personal
Data
Data
Protection
Act
Sector Specific
Tech & Org
Measures
Regulator
Liability
Info & Comm
Office
Consequential
Liability
Living
Individual
Ability to Identify
Individual
Security
Principles
Protection
Security
Breach
Criminal
Activity
Identity
Fraud
Unauthorized
Or Unlawful
Processing
Appropriate
Diligence
Technology
& Cost
Feasibility
Systems &
Controls
Data Protection & Privacy
Suppliers
Accidental,
Unauthorized, or
Unlawful Action
Criminal
Loss or Alteration.
Access or Disclosure,
Destruction or Damage
Damage to Organization
& Reputation
Caused by Organization,
Employees, or 3rd-Parties
Civil Contract Breach
Non-Compliance
Public
Undertaking
Liability of
Individual
Officers
Fines
DPA Enofrcement
Notice
Public Naming
& Shaming
Time
Action
Compensation
Security Risk
Customers
Employees
Current/Former
3rd Parties
Nature of
Data
Harm That
Results
Individual
Corporation
Reliability of Employees
& 3rd-Party Suppliers
Client Instructions
& Obligations
By Law

4. Exposure Mitigation
4
Data Protection & Privacy
Exposure Mitigation
Executive &
Operational
Governance
Information
Security
Policies
Tech & Org
Measures
Information
Access
Control
Staff
Recruitment
& Vetting
Physical
Security
Contracts
With 3rd-Party
Suppliers
Training &
Awareness
Programs
Processes for
Customer Data
Disposal
Compliance
Audit & Monitoring
Process

5. Event Management
5
Data Protection & Privacy
Event Management
1 2
Exception
Handling &
Management
Evaluation
& Response
Containment
& Recovery
Assessment of
Ongoing Risk
3 4
Notification
Of Breach

6. Contact
6