Although this is a United States federal law, UK and european companies trading with American entities should be aware of the requirements, as they may impact compliance with the Act. The law was driven by corporate and accounting scandals, causing…
Having implemented ISO 27001 Information Security Management Systems, and spoken to others who have, there is a group of controls from Annex A that seems to be regularly excluded. A10.9 Electronic Commerce Services, has the objective “To ensure the security…
Using the OHSAS 18001 framework as the basis of your occupational health and safety management system can lead to many benefits including: – A Reduction in accidents and incidents. – Lower insurance premiums. – An advantage when responding to tenders.…
Spare some time to look at the FREE materials provided by the Th!nk Privacy Campaign to help businesses create a culture of privacy and Data Protection Compliance. The materials include posters and bin stickers which can be downloaded, without signing…
From 6th April 2010, the Information Commissioner’s Office (ICO) has new powers to issue fines of up to £500,000 to firms that fail to report data security incidents. Firms are advised to act quickly and responsibly in the event of…
Fines up to £5000 await businesses who fail to comply with the Data Protection Act, even if they have notified the Information Commissioners Office. All organisations collect personal data and therefore are required to notify under the act. However the…
