CISOaaS (vCISO) Service

It almost goes without saying that Covid-19 has dramatically changed the threat landscape since march last year with over 1/3rd of the workforce (on average) now working from home. Phishing attacks with Covid-19 messages are perhaps the most direct evidence of a new angle of attack but there’s lots of anecdotal evidence to show hackers are embarking on opportunities presented by remote working in general.
According to recent reporting by UK based security firm Apricorn, 57% of IT decision makers now believe that remote workers will expose them to a data breach and 47% admitted that their remote workers had already knowingly put corporate data at risk of a breach. These numbers have grown on average 7% year on year so it’s safe to say we can expect to see them jump again.

Of course Covid-19 isn’t the only thing to worry about as it hasn’t eclipsed requirements that companies are obliged to adopt and manage at pain of significant fines and sanctions for non-compliance.
By all accounts, meeting this new compliance burden has been challenging as Mazars reporting bears this out in it’s recent GDPR survey. It reported that only 8% of firms consider themselves as fully compliant while 61% feel overwhelmed by administrative burden and 28% do not have basic record of documentation. Perhaps most importantly 71% of firms reported a personal data breach to authorities.
Other reporting from the Reuters 2020 cost of compliance report tells us that data protection is a top 3 challenge globally for compliance departments as the twin challenges of regulatory overhead and skills shortages hit hard. With this regulatory landscape in mind, it’s not surprising that firms are increasingly looking at all all options including outsourced services as a risk mitigation measure to “stay on top of things” in their approach to data protection.
This is where we see a value add to organisations who are rising to the challenge of GDPR. Our data protection officer service or (DPOaaS) offers you a flexible approach to staffing your compliance function.
Our service offering provides you with a technical and legal savvy resource who can provide interim or extended period services from as little as 8 hours per month on a flat day rate basis.

Register us as your DPO of record and we’ll handle all interactions with the DPC office and become a central point of contact for formal queries or complaints.

Effective data privacy is based on a solid understanding of legal principles and effective communication. Communication with supervisory authorities, customers, processors and internal stakeholders at all levels of the organisation. This is an area we believe we excel in.