IT Governance Blog on IT governance, risk management, compliance and information security.

What are you doing to comply with the new Cookies Law?

According to official guidance from the Government Digital Service (GDS), RECOMMENDATION 1 is to undertake a comprehensive audit of cookies.

The guidance states that ‘… Where it is not possible for a department’s web team to definitively list all the cookies (both first- and third-party), an external organisation can be commissioned to carry out an audit.’

	Cookies Audit Service Book during March for delivery During April RRP: £1,495 Price: £995 You Save:£500 (When booked during March 2012!)

The one year period of grace for compliance with the new Cookies Law is nearly gone – from 26 May 2012, websites that are not compliant with the revised PECR run the risk of attracting attention from the Information Commissioner – and, possibly, a regulatory penalty of up to £500k.

There are less than three months to pull together your EU Privacy Law compliance strategy – and compliance is not going to be straightforward.

• Do you know what cookies your site installs?
• Do you know how intrusive or essential they are?
• Do you know how to get the ‘informed consent’ of your visitors prior to installing each of the cookies?

There will be difficult decisions to make and technological website changes to implement. Web developers are not compliance experts. The compliance obligation falls clearly and squarely on the website operator. As there has been a 1 year lead-in period, there is no excuse for not having made a start on compliance.

The essential first step is to complete a Cookies Audit. A Cookies Audit will tell you what cookies you have on your site and will tell you what steps you need to consider in order to become compliant. The ITG Security Testing Cookies Audit is a quick, effective and thorough process that delivers all the information the ICO expects of such an audit – and, alongside our detailed analysis of your cookies, we throw in extra value, such as relevant opt-in text and a cookie security assessment.

Don’t take chances – get an experienced website testing firm to audit your site right away. Don’t get caught in the last minute rush when prices go up and resource availability goes down. – and, until 30 March 2012, pay only £995 per website – book online, email us or call our customer service team and get your Cookies Audit scheduled right away.

0845 070 1750

Act today. We’re ready and waiting for your call.

When you book all three together during March 2012, you get three for the price of two!

Attend:
PCI Foundation Course – 29 March 2012
ISO27001 Certified ISMS Foundation – 5 April 2012
DPA Foundation Course – 11 May 2012

Please note: We offer full flexibility on course dates and you can send a different delegate on each course. If you have specific requirements that differ from the options available please call 0845 070 1750 or email servicecentre@itgovernance.co.uk.

Don’t delay. Use any remaining budget you have to tackle these important compliance issues. Book Today!

All UK organisations must comply with the Data Protection Act (DPA). Failure to do so could incur a monetary penalty of up to £500k from the Information Commissioner’s Office (ICO).

If you have any budget left for this financial year and want to get on top of this compliance issue, don’t delay in purchasing the Complete Data Protection Toolkit. It only costs £156 and gives you a complete do-it-yourself solution.

As an additional benefit, when you purchase the Complete Data Protection Toolkit during March 2012 we’ll send you a free Cyber Security Self Assessment Tool, which will enable you to assess the overall security posture of your organisation!

Don’t hesitate, buy today!

The Complete Data Protection Toolkit provides all the tools and resources you need to carry out your own DPA project and become compliant quickly and cost-effectively.

Find out what’s included and how you can put it to use today.

Ensure you organisation avoids fines and brand damage and become DPA Compliant today.

The one year period of grace for compliance with the new Cookies Law is nearly gone – from 26 May 2012, websites that are not compliant with the revised PECR run the risk of attracting attention from the Information Commissioner – and, possibly, a regulatory penalty of up to £500k.

There are less than three months to pull together your EU Privacy Law compliance strategy – and compliance is not going to be straightforward. Do you even know what cookies your site installs? Do you know how intrusive or essential they are? Do you know how to get the ‘informed consent’ of your visitors prior to installing each of the cookies?

There will be difficult decisions to make and technological website changes to implement. Web developers are not compliance experts. The compliance obligation falls clearly and squarely on the website operator. As there has been a 1 year lead-in period, there is no excuse for not having made a start on compliance.

The essential first step is to complete a Cookies Audit. A Cookies Audit will tell you what cookies you have on your site and will tell you what steps you need to consider in order to become compliant. The ITG Security Testing Cookies Audit is a quick, effective and thorough process that delivers all the information the ICO expects of such an audit – and, alongside our detailed analysis of your cookies, we throw in extra value, such as relevant opt-in text and a cookie security assessment.

Don’t take chances – get an experienced website testing firm to audit your site right away. Don’t get caught in the last minute rush when prices go up and resource availability goes down. – and, until 30 March 2012, pay only £995 per website – book online, email us or call our customer service team and get your Cookies Audit scheduled right away.

0845 070 1750

Act today. We’re ready and waiting for your call.

Compliance with the UK Data Protection Act (DPA) is a high priority right now, especially considering the recent fines issues by the Information Commissioner’s Office (ICO) for failures to protect sensitive data.

If you have any budget left for this financial year, you should be looking to get maximum value by securing the training and resources to help with compliance issues over the next few months.

At IT Governance, we’re committed to helping organisations to get the most from their budgets and offer you the chance to buy now and save for the future.

We have the end-to-end solution for all your information security, IT governance, risk management and compliance needs.

For Data Protection Act Compliance we offer everything:

• Consultancy Services for DPA compliance
• Public and in-house training courses
• Do-it-yourself DPA documentation toolkits
• DPA Staff Awareness Training – eLearning
• Physical Security Accessories (encrypted USB sticks, Privacy Filters etc …)

Talk to us today and find out how we can help you achieve DPA compliance on time and on budget.

0845 070 1750

This interactive and enjoyable one-day course gives both new and experienced staff and management – those involved with or responsible for personal data – an oversight of what the Data Protection Act means to their business also to their own rights as an individual.

“I would like to thank the course tutor on behalf of the Troop for the in-house training that he delivered on Friday. Although I did not attend it myself, the guys got a lot out of the course and have now started firing questions at me (which means they were awake for the course!!!!!).
Please pass on my thanks to Ralph for a well structured and delivered course”
SSgt Lee Johns, MOD

Get to grips with DPA compliance

Book your place on this course today >>

Data Protection within the UK is a hot topic, and within your business it should be even hotter. Under the DPA, if you or any of your colleagues breach the Data Protection Act (DPA) it could cost your firm up to £500,000 in fines from the ICO and inflict brand damage which could eventually close down your business.

Know your requirements within Data Protection and don’t let this happen.

Your business needs to operate in compliance with the Data Protection Act. Know your requirements with this essential book, available to download today >>

Know your requirements with this handy DPA pocket guide >>

More to explore:

There is a standard approach towards achieving DPA compliance:

• Understand what the DPA is how it affects your business
• Identify your current level of conformance to the DPA
• Identify gaps and steps to achieve compliance
• Document your DPA policies
• Understand how to react if you suffered a data breach
• Initiate DPA staff training.

Our Complete Data Protection Toolkit contains everything you need to use this recommended approach.

Ensure you organisation avoids fines and brand damage and become DPA Compliant today!

Buy this toolkit before the end of February and get a free ICT Strategy Toolkit!

We are now offering you the chance to book the DPA Foundation Course and the PCI Foundation Course together, saving you £200!

The DPA and PCI Foundation Combination Course offers you the chance to tackle both compliance issues at a reduced price. Both courses (which take place in March 2012) cover the compliance basics and are ideal for those either new to the subject or those that want a refresher course in handling data.

Complete DPA and PCI training: Book together and save £200! >>

Complete DPA and PCI training: Book together and save £200! >>

The DPA Foundation Course and PCI Foundation Course are also sold separately on our website.