Archive for the ‘International’ Category

Is Your Organisation Fully Compliant to the Data Protection Act?

May 16th, 2012 by

Will the Information Commissioner’s Office be knocking on your door?

The Information Commissioner’s Office (ICO) announced last week that the first NHS organisation has been fined for a serious breach of the Data Protection Act. The Aneurin Bevan Health Board (ABHB) has been issued with a penalty of £70,000 after information relating to a patient’s health was sent to the wrong person.

Stephen Eckersley, the ICO’s Head of Enforcement confirmed:

The health service holds some of the most sensitive information available. The damage and distress caused by the loss of a patient’s medical record is obvious, therefore it is vital that organisations across this sector make sure their data protection practices are adequate.

For further information, please see the ICO News Release: 30th April 2012.

In common with the National Health Service, all Public Sector organisations are required by law to be compliant to the Data Protection Act 1998 and fully obligate their responsibilities with respect to the processing of the personal information of their key stakeholders.

DPA Foundation Training DPA Foundation Course


Price: £440

Learn more

Buy Now

     

The IT Governance DPA Foundation Course is a 1-day session designed to provide you and your staff with a full knowledge of the 8 Principles of the DPA and the practical advice to ensure that all practices associated with processing personal information are implemented and maintained on a continual basis. The course is delivered by our Senior DPA Consultant, Ralph O’Brien who has been a DPA practitioner since 1998 and was a co-author of the ACPO Data Protection Audit Manual used by the majority of UK police forces.

Ensure Your Organisation is Fully Compliant to the Data Protection Act.

Book on the DPA Foundation training course online now >>>

A step-by-step route to PCI compliance

May 15th, 2012 by

The PCI Compliance Toolkit sets out a clear process which will enable you to become PCI compliance. Created by compliance experts the tools, documents and guidance in this toolkit will:

  • Make clear your PCI Compliance requirements
  • Help you create a roadmap to achieve compliance
  • Understand what the Self-Assessment Questionnaire is and how to complete it
  • How to create the policies, documents and procedures that will assure compliance
  • Provide you with 12 months support
PCI Compliance Toolkit PCI Compliance Toolkit

Price: £249.95

Learn more

Buy Now

     

Until the 24th May this toolkit also comes with a free Olympics Policies & Checklists.

The Olympics is set to cause many businesses disruption because of travel issues, absenteeism and supply chain problems. The Olympics Policies & Checklists will help you prepare and ensure you can continue with business as usual during this period.

Achieve compliance and protect your brand with this toolkit offer >>>

IT Governance Launches New ISMS SmartCard Training Aid

May 15th, 2012 by

The new Smart Card Training Range has been developed to help organisations tackle important IT issues such as information security, ITSM, business continuity, cloud computing and soft skills.

The The ISMS Card Game is the first in this series and will help organisations teach their staff about information security. Often a complex and seemingly difficult subject to approach the ISMS Smart Card game makes tackling this issue accessible and interactive for even the least technical minded of individuals.

The ISMS Card Game will help train staff – in a fun and low impact way – about the importance of information security and what to do in the situations they will face in their own workplace.

 

The ISMS Card Game The ISMS Card Game

Price: £9.95

Learn more

Buy Now

     

How do the cards work?

The numbered cards feature terms and definitions of typical information security situations that individuals will face in all organisations. The picture cards feature top tips whilst the joker cards portray specific security issues for discussion.

Staff are the weakest link when it comes to information security within an organisation.

The ISMS SmartCards can be utilised in a variety of learning environments, offering a more enjoyable and engaging approach to learning. The cards are perfect for pairs, groups or as flash cards for individuals.

Improve your organisations understanding of information security management with the fun and interactive ISMS card game.

Order your pack of ISMS Cards today >>>

Demonstrate the benefits of an IT governance framework to your CEO

May 15th, 2012 by

Question: Why do so many organisations NOT have an effective IT governance framework in place?

Answer: The CEO often doesn’t realise what one is, or the HUGE benefits it can bring.

Needless to say that creating an effective IT governance framework is probably not on the CEO’s top list of challenges. But make them aware of the benefits and you might just change their perception…

  • Competitiveness
  • Increased efficiency of IT services whilst driving down costs
  • Meet all your regulatory and statutory compliance requirements
  • IT can facilitate and drive business change, helping meet business objectives

CEO’s and boards continue to demand value and better services from their IT departments. Exceed expectations by creating a IT governance framework. Implement an effective IT governance framework in your organisation with the IT Governance Framework Toolkit.

IT Governance Framework Toolkit IT Governance Framework Toolkit

Price: £495

Learn more

Buy Now

  The toolkit includes a free Olympics Policies & Checklist  

This toolkit will enable you to integrate all your existing IT frameworks, maximising their effectiveness, driving efficiency and reducing duplication of work. Containing all the documents, templates, guidelines and planning tools this toolkit costs less than one days consultancy.

Currently this toolkit also comes with a free Olympics Policies & Checklists. Recent falls in levels of workplace sickness absence have stalled and fresh efforts must be made to maintain the downward trend, according to a recent EEF report.

With the London Olympics happening this summer, absenteeism, along with travel disruption, business disruption, security threats and supply chain problems, organisations should use the ‘Olympics 2012 Continuity & Security Policy and Checklist’, to get ahead of the games and protect their most valuable assets.

Download the IT governance Toolkit today >>

Planning for the Olympics? Read our solution….

May 14th, 2012 by

If your business is likely to be affected by the London Olympics (and chances are it will), then you need to have a solution in place now.

Chances are, you will likely experience: absenteeism, travel and business disruption, security threats and supply chain problems. In order for this event to have as little impact as possible on your organisation, then you need to plan ahead and get a BS25999 BCMS Implementation Toolkit. This toolkit contains all the templates and tools you need to effectively implement a BCMS in line with BS25999 (best practice for Business Continuity Management).

Buy the BS25999 BCMS Implementation Toolkit during May and get the ‘Olympics 2012 Continuity & Security Policy and Checklist’ free >>

BS25999 BCMS Implementation Toolkit BS25999 BCMS Implementation Toolkit

Price: £395.00

Learn more

Buy Now

     

The BS25999 BCMS Implementation Toolkit contains document templates and guidance (download list of documents and tools included in the toolkit) that enable you to quickly and efficiently produce your own tailored versions of all the essential documents.

Plus the ‘Olympics 2012 Continuity & Security Policy and Checklist’ is designed specifically for the London 2012 Olympics, so you will be able to get ahead of the games whilst protecting your most valuable assets. You will be able to use this checklist for future events and disruptions.

Find out more >>

More to explore:

BS25999: A Pocket Guide (eBook)
BS25999: A Pocket Guide (eBook)

Learn more

Buy Now

Business Continuity Management: A Manager's Guide to BS25999 (eBook)
Business Continuity Management: A Manager’s Guide to BS25999 (eBook)

Learn more

Buy Now

BS25999 Certified BCMS Lead Implementer Masterclass - London
BS25999 Certified BCMS Lead Implementer Masterclass – London

Learn more

Buy Now

Apple Launches iCloud – Are You Going To Step On?

May 11th, 2012 by

Attention all Apple users, the iCloud is finally here. This means that your Apple based content will now be available across all of your Apple devices: iPhone, iPod Touch, iPad and Mac

According to Apple, the iCloud is “more than a hard drive in the sky” – it “automatically and securely stores your content” giving you access to all your data on whichever device you happen to be using.
Source: Apple

Apple and Google are leading the way when it comes to adopting Cloud Computing. But how safe is the cloud? How secure will your information be? And how could Cloud Computing benefit your business?

Cloud Computing: Assessing the risks answers these questions and many more. Using jargon-free language and relevant examples, analogies and diagrams, it is an up-to-date, clear and comprehensive guide the security, governance, risk, and compliance elements of Cloud Computing.

Download today >>

Cloud Computing: Assessing the Risks Cloud Computing: Assessing the Risks (eBook)

RRP: £49.95
Price: £39.95
You Save: £10.00

Learn more

Buy Now

     

“…It should be a most welcome read to any senior stakeholders looking to embrace the new Cloud Computing wave.”
Eugene Kaspersky, Chairman and CEO, Kaspersky Lab

Download today >>

Implement IT Governance to Ensure Your IT Really Delivers

May 11th, 2012 by

Does information technology in your organisation help you deliver on your business objectives? Effective IT governance is acknowledged as the key to strategic IT management in all successful organisations. But with so many related standards and frameworks such as ISO27001, COBIT® and ITIL® to choose from, how can you govern effectively without spending excessive time and cost on rigid management processes?

The Implementing IT Governance: Foundations & Principles training course will show you how to create a single integrated management framework that ensures your IT truly supports and delivers on your strategies and objectives.

Implementing IT Governance: Foundation & Principles Training Implementing IT Governance: Foundation & Principles Training

Price: £1,495

Learn more

Buy Now

     

Created and led by Alan Calder, the Implementing IT Governance: Foundations & Principles course is a three-day session that delivers foundation training to raise awareness, build knowledge and develop a complete understanding of IT governance. Alan is acknowledged by his peers as an expert in the field and is the author of a number of definitive publications which include IT Governance: Guidelines for Directors and IT Governance Today – a Practitioner’s Handbook.

By attending the Implementing IT Governance: Foundations & Principles course, you will learn:

  • Understand and define IT governance and its best practice
  • Achieve the alignment of IT and business plans
  • Navigate and integrate all the currently available IT governance frameworks
  • Identify and manage IT risk across the enterprise
  • Implement an IT governance framework and measure the results

Ensure Information Technology in Your Organisation Really Delivers

Book the Implementing IT Governance: Foundations & Principles course today >>>

InfoSec Consultant reviews Auditing Cloud Computing, exclusively for IT Governance

May 10th, 2012 by

Manish Sehgal, principal consultant of Information Security at Seven Step Consulting Pvt reviews Auditing Cloud Computing – A Security and Privacy Guide, exculsively for IT Governance….

Summary: Good book on demystifying the world of cloud computing from an auditor’s perspective.

Cloud computing has been here for quite some time now, and people from the compliance industry are still finding it challenging as to which controls/ frameworks apply to the arena of cloud computing.

Although many significant efforts have been made in the way of explaining how to audit cloud architecture, nothing else comes close to simplify the techno-compliance of the subject in the way Ben Halpert’s book is designed.

The book flows from the basic to the advanced level in a very easy-to-understand manner. The newbies to the auditing domain will find it quite comprehensive and the experienced will find it adequately knowledgeable at the same time.

Topics covered will make the reader understand the complexities of storing data in the cloud and the ways and means which every organization needs to understand before taking the next step. To a service provider the book explains what they should be doing to gain the confidence of a customer and to a service user the book defines what to look for when selecting a service provider. From an auditor’s perspective, the book explains the areas of concern when you are auditing a cloud based organization.

To summarize, this book is for everyone who is involved in the field of cloud computing whether as a service provider, a service user or an auditor. Even people involved in sales of cloud services would find this book useful as they can learn the jargon and use it as their USP.

I would recommend this book to mangers, senior managers, and decision makers who are working in the domain of cloud computing.”

You can read more and purchase this book from two of our websites:

ITGovernance.co.uk – which is denominated in British Pound Sterling (£)

ITGovernanceUSA.com – which is denominated in US Dollars ($)

Maintain your ISMS with unique quarterly updates from Alan Calder and Steve Watkins

May 10th, 2012 by

Is your organisation already certified to the ISO/IEC ISO27001:2005 Standard? You will of course know that ensuring the continued effectiveness of your Information Security Management System (ISMS) is the key element to ensuring best practice and compliance in the future.

With the ever changing business and technology trends, how can you ensure that your corrective action and preventative action (CAPA) plan is regularly updated and actually working?

How can you ensure that when you have your surveillance visit, you do not incur a major non-conformity that threatens the status of your certification or that involves significant and unplanned cost to your organisation?

The Reviewing and Improving Your ISO27001 ISMS Training Programme is a unique opportunity to ensure that you are continually updated on all of the current business, technology and regulatory issues that will challenge your ISMS.

 

Reviewing and Improving Your ISO27001 ISMS Training Course

Reviewing and Improving Your ISO27001 ISMS Training Course

RRP: £995

Price: £895

You Save: £100

Learn more

Buy Now

     

Our complete programme consists of four training courses delivered on a quarterly basis to ensure you receive timely and relevant information AND the advice on how it affects your information security management system. Scheduled for July, October and February in 2012/13, each course is a 2-day session run by Alan Calder and Steve Watkins. Alan and Steve are the directors of IT Governance and are considered by their peers to be leading authorities and consultants on ISO27001.

The Reviewing and Improving Your ISO27001 ISMS Training Programme is not just a training course. With two consultants hosting each event, we can also offer you the opportunity to specifically discuss the issues affecting your individual ISMS continual improvement plan.

By attending the Reviewing and Improving Your ISO27001 ISMS courses, you will be updated and advised on the following key topics:

  • Management Review Best Practice
  • Changes in the Business Environment
  • New threats and vulnerabilities
  • New legislation and regulations
  • New standards and certification requirements

Download the full details and a content list of the courses from here

Ensure you are updated on all issues that affect the continued improvement of your ISMS

Book on the Reviewing & Improving Your ISO27001 ISMS Training Programme now

Be one of the first to get your hands on the NEW Business Transformation Toolkit

May 9th, 2012 by

Out this month, the Business Transformation Toolkit will enable you to:

  • Plan and prepare for change, identify the objectives of the change wanting to be made, communicate it and manage the impact of the change
  • Implement change, building an effective change team
  • Embed the change, for the transition to appear seamless to the customer(s).

Written and created by Melanie Franklin (founder and Chief Executive of Maven Training, and author of Managing Business Transformation: A Practical Guide), this toolkit will help you put into place a detailed and effective documentation system to enable your businesses change, whilst also helping you to maintain and monitor the transformation.

Pre-order this toolkit today >>

Business Transformation Toolkit (Pre-order) Business Transformation Toolkit (Pre-order)

RRP: £395.00
Price: £295.00
You Save: £100.00

Learn more

Buy Now

     

Pre-order this toolkit today >>

We also offer a Managing Business Transformation Training course in London, which will provide you with access to the structure and techniques for managing business transformation effectively in your business. Read more >>

More to explore:

Managing Business Transformation: A Practical Guide
Managing Business Transformation: A Practical Guide

Learn more

Buy Now

Running IT like a Business: A Step-by-Step Guide to Accenture's Internal IT
Running IT like a Business: A Step-by-Step Guide to Accenture’s Internal IT

Learn more

Buy Now

Everything you want to know about Organisational Change
Everything you want to know about Organisational Change

Learn more

Buy Now