GDPR/Data Protection
Maor's expertise in GDPR provides your organization with crucial guidance in navigating data protection complexities, ensuring compliance, and safeguarding against legal risks.
General Data Protection Regulation (GDPR) is the European Union’s (EU) personal data protection law that aims to protect the privacy of EU citizens. Enacted in May 2018, it imposes rules on all organizations that process personal data originating from the EU, regardless of location. When it comes to data protection risk management, organizations must be able to demonstrate to stakeholders that data protection is a serious consideration. Maor’s expertise can assist your organization in ensuring its compliance with GDPR as it relates to cybersecurity. Data protection is not just the remit of compliance departments. Employees play a major part in protecting your organisation and critical information against threats and data breaches. Organizations need to have best practices in place to understand their risk and protect themselves from data breaches and potential legal ramifications of GDPR.
.png)
Implementation
Design, development and implementation of ISO/IEC 27001:2022 -conformant information security management system (leveraging ISO/IEC 27001:2022 best practice guides/codes of practice 27002, 27003, 27004, 27005 and 27007).
Gap Analysis
Provision of ISO/IEC 27001 gap analysis resulting in critical insight into your organisation’s current conformance/compliance status to ISO/IEC 27001 - and how to bridge any gaps. Essentially, ISO/IEC 27001 gap analysis provides specific awareness of what needs to be done to attain ISO/IEC 27001 certification with the added bonus of also understanding your organisation's security position/posture.
INTERNAL Audit Services
Provision of fully ISO/IEC 27001-conformant audit/auditor services (single/recurring audits and/or a “turnkey” internal audit programme) which critically contributes to the mandatory performance evaluation and continual improvement requirements of ISO/IEC 27001.
Our “turnkey” internal audit programme can also include foundational auditor competency development through coaching and mentoring. Additionally, Maor can also provide a secure hosting option of its custom-designed audit programme cloud-based application to further underpin effective and efficient audit management.
Employee ISO/IEC 27001-focused information security training and education
Design, development, delivery, evaluation and continual improvement of ISO/IEC 27001 education and training to meet the dual objectives of assuring suitable, adequate and relevant ISO/IEC 27001 awareness and competency across all ISMS roles, responsibilities and authorities. All our education and training provides suitable and adequate documented evidence of participation and associated competence achievement.
Our ISO/IEC 27001 education and training includes:
· General employee education and awareness.
· Practical implementation including critical information security risk assessment and treatment).
· Auditor development and mentoring.
· Risk management (including general risk management).
· Top (Senior) management workshops (ISO/IEC 27001 for Top Management).
· ISMS and information security performance evaluation.
· Custom-designed organizational-focused programmes.
Maor ISO/IEC 27001 education and training services takes a collaborative, co-design/co-development approach and is facilitated by internationally experienced practitioners (training and ISO/IEC 27001).
