GDPR

GDPR is a regulation requiring companies to protect EU citizens ‘ personal data and privacy for transactions taking place within EU Member States. And failure to comply could cost companies a lot.

The European Parliament adopted the GDPR in April 2016, replacing an outdated data protection directive from 1995. It carries provisions that require businesses to protect the personal data and privacy of EU citizens for transactions that occur within EU member states. The GDPR also regulates the exportation of personal data outside the EU.

Involvement

To start with the process of compliance with GDPR, a sense of urgency will emerge from top management. All stakeholders should be interested as IT alone is not well prepared to meet the GDPR requirements.

It is necessary to set up a task force comprising departments such as sales, advertising, services, finance etc.

Risk Assessment

There should be a risk assessment. An organisation, while knowing the threats that affect it, needs to know what all the information it holds as well as processes for EU citizens. It should also be borne in mind that risk assessment should detail all types of actions to be taken to minimize this particular risk.

Data Protection Planning

It is necessary to create a data protection policy. There are many companies that already have a plan in place, but they should review it and update it to ensure it is in line with GDPR requirements.

Implementation

Now, the steps need to be implemented in order to mitigate any kind of threats. If a company gets an idea of the risks and ways to mitigate them, the steps should be put in place. For most businesses, this means having to review the current risk mitigation measures.

Other Services

Wireless Penetration Testing

A wireless penetration test is an assessment of a client’s wireless networks. Main motive of this pentesting is to gain access to a WPA2 personal or enterprise network.

Learn More

Physical Penetration Testing

Detox team will assess physical security controls of the organization and will find out loopholes and try to break into the premises legally to assess security measures and see where they can gain access.

Learn More

IoT Security Testing

Detox team will perform an in-depth analysis of Internet of Things physical device, network & application security testing of the IoT (Internet of Things) device.

Learn More

Social Engineering & Phishing drill

Detox team will perform social engineering attack to see how employees will react to the attack, will they end up clicking the link or they act smartly and report it.

Learn More

What our customers are saying

We used detox services after having a regular pentesting by our vendor, we were surprised to see the number of issues they reported even after we fixed all the issues reported by our vendor. Detox will definitely be my only choice for next year pentesting also.

– Director of Cyber Security @ E-commerce company

Detox team helped us in implementing proper SSDLC in our organization which helped us in reducing the overall security issue count

– Head of Security @ UK based Product Company

Only the best Cyber Security experts

Detox staff have exposed security flaws on worlds biggest platforms, and are recognised in their ‘Hall of Fames’

Want to know more about our services?

Get in touch