Data Security & Cyber Security

Data protection law requires that personal data must be kept secure, with severe financial penalties and adverse publicity as possible consequences for organisations that fail to do so.

Organisations must consider the myriad ways in which personal data could become compromised, accessed, altered, used or deleted and take appropriate measures to prevent this. The threat of cyber attacks is of increasing concern and relevant resources must be deployed. At the same time, organisations must be aware of non-online threats to data security and take appropriate measures.

This course takes a detailed and practical look at data protection legal requirements as regards both cyber security and data security and includes:

• what is meant by cyber security and data security, and the legal requirements in relation to both
• the practical impact that security incidents have on organisations
• the threat landscape and current trends in data and cyber security
• cyber security fundamentals – the CIA Triad of confidentiality, integrity and availability
• technical security requirements including identity and access rights and software updates
• the NCSC’s 10 steps to cyber security
• what is actually meant by organisational security
• supply chain management including security risks in contracts and data sharing arrangements
• data breaches and an introduction to how to prepare for breaches
• incident responses, including whether notification to the ICO and/or affected individuals is required
• the Information Commissioner’s enforcement powers and data protection claims

This course features real-life examples, case law, case studies and group exercises to embed knowledge.

Attendance on the Classroom and Virtual(Teams) formats of this course can be used as credit towards gaining the Practitioner Certificate in Data Protection.

For those looking for a deeper understanding of the technical, regulatory and practical aspects of cybersecurity, delegates may wish to attend the course Cybersecurity for Data Protection Professionals.