Information security has become a business-critical issue. It is not something you can tackle in isolation, as there are obvious overlaps with cyber security and data protection.
A logical process for reviewing and addressing your information security requirements is to:
identify what information you hold, manage or are responsible for
assess the risks to that information
implement systems and controls to protect the information and mitigate risks so far as reasonably practicable
train your staff to include ongoing awareness campaigns
review your processes on a recurring basis, at least annually
You must protect client money and assets.
You must also keep the affairs of clients confidential unless disclosure is required or permitted by law or the client consents.
Integrity and confidentiality of personal data is a key principle of the Assimilated Regulation (EU) 2016/679, General Data Protection Regulation (UK GDPR). Personal data must be processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. This is
To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.
CONTACT US
