MiFID 2, Cyber Essentials, ISO 27001 and GDPR Compliance Solutions

We are intimately familiar with many compliance frameworks and requirements, and can help you navigate them efficiently and effectively to help your people focus on what’s important.

MiFID II

What is MiFID II?

The Markets in Financial Instruments Directive (MiFID) is the framework of European Union (EU) legislation for investment intermediaries that provide services to clients around bonds, shares, units in collective investment schemes and derivatives (collectively known as ‘financial instruments’), and the organised trading of financial instruments.

Cyber Essentials

What is it?

Cyber Essentials is a simple but effective, Government backed scheme that will help you to protect your organisation, whatever its size, against a whole range of the most common cyber attacks.

Cyber attacks come in many shapes and sizes, but the vast majority are very basic in nature, carried out by relatively unskilled individuals. They’re the digital equivalent of a thief trying your front door to see if it’s unlocked.

Are my systems secure?

If this question is on your mind, you should have your systems’ security assessed as soon as possible. Security should not only be evaluated after an attack or an event. Secure systems provides peace of mind and can save you lots of money in dealing with a data breach or systems breach.

Cyber Essentials and GDPR?

Cyber Essentials is a great starting point for GDPR compliance. It’s not a full GDPR solution – that’s where we come in – however, the technical controls in Cyber Essentials give you a solid base on which you can build your cyber security as appropriate.

Security as a Service (SAAS)

Over the years we have tried and tested numerous security providers and we only use the best. Using a central cloud console, we deploy security agents to your systems. This allows us to effectively manage the security on all your devices regardless of location whilst you get on with business.

ISO 27001

ISO 27001 is one of the most popular information security standards in the world. It is recognised globally as a benchmark for good security practice and can further help with other compliance issues like GDPR. We can help you meet accreditation standards and help you prepare for a successful audit.

What is ISO 27001?

The ISO 27000 family of standards helps your organisation manage the security of assets such as financial information, intellectual property, employee details and any information entrusted to you by third parties. ISO 27001 provides specifications for your information security management system (ISMS).

What is an ISMS?

An ISMS is a framework of policies and procedures, centring around people, processes and technology. This includes legal, physical and technical controls which increase your resilience to cyber attacks and reduces costs associated with information security.

Benefits of an ISMS

The benefits of a well-manicured ISMS goes beyond just security and safety. It helps you secure information in all forms, whether digital, paper-based or cloud-based. It can also reduce costs associated with information security by helping you understand your security processes better and not spending money on security layers that may not be effective.

GDPR

What is GDPR?

GDPR makes businesses more accountable for the protection of any personal data they are in possession of.

Businesses that do not have systems and processes in place to protect this data and remove it from record when required, will face fines of up to 20 million Euros or 4% of global turnover – whichever is greater.

Does GDPR apply to me?

Most likely, yes! If you collect and store any personal data of customers and potential customers need to be aware of how they should GDPR laws.

This includes order data, enquiries, email addresses for a newsletter, phone numbers and other types of information.

Could I already be compliant?

It is possible that you may already be compliant, however given the risk, it is best to engage with one of our compliance professionals to be sure.

GDPR goes beyond security, with the potential to change the requirements of business processes, how data is stored and your internal data handling processes.

How can Host Logic help?

Working with one of our experienced compliance consultants, we will help you evaluate your current customer data storage and handling procedures, and then help you work towards an simple strategy for dealing with any GDPR-related requests.

Compliance