Implementing VOSO Lite provides the staff training, Information risk and general data protection policies that addresses the first line of defense for an organization which is people and process. It tells the organization’s workforce what they can and cannot do and trains them to offset social engineering campaigns that are one of the main causes of a data breach. It completes Sections 6, 8 and 10 of the ICO’s Practical Guide to IT Security for Small Medium Businesses that is the security section of the guide to the GDPR. All that is required is for you to complete a simple registration form and load your employees' email addresses into VOSO. VOSO Lite does the rest.
It’s just £1 per user per month. You can't afford not to! Click here to get started: UK VOSO-Lite
If you are in the US, it's just a $1 per user per month - Click here to get started: US VOSO-Lite
After VOSO Lite you move onto VOSO Plus that implements Cyber Essentials which is a great first step. It can already mitigate ICO fines if a company suffers a breach. Cyber Essentials certification is evidence that you have implemented the basic technical controls towards protecting your business and your data from Internet-based cyber-attacks. It then progresses onto IASME governance standard that includes the specific GDPR questions. By completing this stage, you will demonstrate that your organization has implemented a wider governance system for management of the controls protecting personal data. It adds a number of actions such as assessing business risks incident response planning and handling operations issues.
Click here for a quote.
One of the responsibilities of GDPR is to make sure your IT contractor is doing what they should be. That means they are treating your data with at least the same level of security as you would. Because some IT contractors are focused purely on “break and fix” they may not be willing or qualified to carry out the technical controls required for GDPR. They may also be employed on a time and material basis which means the controls are not carried out on a dynamic, continuous basis putting the organization at risk. They can also be very expensive. To address this VOSO Assured was developed to implement the technical controls required at a price specifically for small and medium businesses. VOSO Assured is mapped into the standards to ensure compliance.
Call CySure or use the contact CySure form to find out more.