RNR Consulting

GDPR
Home GDPR

Here we undertake a thorough assessment of scope of GDPR applicability. We determine the assets required to be GDPR compliant and the business portion which has to be excluded.

It includes asset identification, risk assessment, and existing control identification. Based on basic tenets of GDPR, we decide the cost-effective measures for achieving data privacy and security. A detailed implementation plan is carried out.

Implementation stage involves mapping data flows in and out of the organisation, establishing policies and procedures to generate lines of accountability and maintaining a system of checks-and-balances to ensure compliance with GDPR

Under this phase, we conduct Privacy Impact Assessment (PIA) and Data Protection Audits (DPA) via seminars, workshops, questionnaires, PIA frameworks and onsite inspections.

Certification process is carried out by independent auditors (generally a US-based CPA), not by implementers. We help you find a suitable auditor for the certification process and help throughout the process.

33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
52 (1)
51 (1)
53
54
55 (1)
1 (1)
2 (1)
10
8
9
6
11

GDPR

Strengthens Consumer Trust In Organization With Promise Of Better Data Security

The General Data Protection Regulation (GDPR) is a new standard in protection of Data Privacy of EU citizens. Replacing the existing GDPR regulation, it mandates a wider definition of Personally Identification Information (PII) and imposes strict penalties for non-compliance.

    Service Request Form

    Select Service(s) You Want:

    Information & cyber security program strategy & roadmapEnterprise & cyber security risk assessment & managementThird party risk managementVirtual CISO serviceCyber security awareness programPhishing simulation programThreat modelingUser access governance & certificationIncident management and response planISO 27001/22301/27701/9001RBI master directionNHB cyber security guidelinesIRDAI cyber security guidelinesNIST FrameworkSOC1/SOC2Data localization as per RBI circular of storage of payment system dataCIS frameworkInternal audit managementCloud assessment as per CISDesigning cloud security architectureCSPM security monitoringGap assessment as per applicable guidelinesNetwork architecture reviewFirewall rule reviewFirewall configuration reviewSystem hardening checksVulnerability assessment program managementWeb application penetration testingMobile application penetration testingInfrastructure vulnerability assessmentAPI vulnerability assessmentAPI fuzzingRed teaming ExerciseData protection advisoryData flow diagramDigital personal data protection acData protection controls implementationData discovery and classificationDesigning of data protection policyData governance programDigital personal data protection acGap assessmentArticulation of policy and proceduresISO 27001/22301/27701/9001, PCI-DSS, SOC1/SOC2, COBIT, COSO, HIPPA, RBI, IRDAI, NIST, Data Localization, CISGRC tool implementationArticulation of BCP plan and strategyCrisis management planBCP/DR planning and implementationImplementation of BCMS standard (ISO 22301)Conducting actual and tabletop DR drillsFunctional recovery planGRC resource deployment onsite/offsiteSecurity services resource deployment onsite/offsite

    Contact Details:

    Name (required):

    Organization Name (required):

    Email (required):

    Contact No (required):

    Detail about the requirement (optional):