General Data Protection Regulation
Requirement

32. Security of processing

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Fulfill this requirement by completing the tasks below ->
General Data Protection Regulation
32. Security of processing
This requirement is part of the framework:  
General Data Protection Regulation

Other requirements of the framework

10681
31. Cooperation with the supervisory authority
10680
30. Records of processing activities
10682
32. Security of processing
10683
33. Notification of a personal data breach to the supervisory authority
10684
34. Communication of a personal data breach to the data subject
Best practices
How to implement:
32. Security of processing
This policy on
32. Security of processing
provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.
Read below what concrete actions you can take to improve this ->
32. Security of processing
Frameworks that include requirements for this topic:
No items found.

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to
32. Security of processing
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
31 requirements
No other tasks found.
Complete these tasks in Cyberday ISMS ->

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement
32. Security of processing
of the framework  
General Data Protection Regulation
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
31 requirements
Staff guidance and training procedure in cyber security
Critical
High
Normal
Low
88
requirements
Personnel security
Cyber security training

Staff guidance and training procedure in cyber security

This task helps you comply with the following requirements

Članak 30.1.g: Kibernetičke higijene i osposobljavanje o kibernetičkoj sigurnostiNIS2 Croatia
2.6: Ohjeet ja koulutusTiHL tietoturvavaatimukset
9.11 §: Perustason tietoturvakäytännöt ja henkilöstön vastuuKyberturvallisuuslaki
9.2 §: Kyberturvallisuuden toimintaperiaatteetKyberturvallisuuslaki
9.6 §: Henkilöstöturvallisuus ja tietoturvakoulutusKyberturvallisuuslaki
Data system listing and owner assignment
Critical
High
Normal
Low
76
requirements
System management
Data system management

Data system listing and owner assignment

This task helps you comply with the following requirements

Članak 30.1.i (Imovina): Upravljanja programskom i sklopovskom imovinomNIS2 Croatia
4.1: Tietojärjestelmien tietoturvallisuusTiHL tietoturvavaatimukset
2.5: RiskienhallintaTiHL tietoturvavaatimukset
9.5 §: Suojattavan omaisuuden hallintaKyberturvallisuuslaki
1.3.1: Identification of information assetsTISAX
Regular reviewing of data system access rights
Critical
High
Normal
Low
32
requirements
System management
Access control and authentication

Regular reviewing of data system access rights

This task helps you comply with the following requirements

I06: Pääsyoikeuksien hallinnointiKatakri
16 §: Tietojärjestelmien käyttöoikeuksien hallintaTiHL
24. Responsibility of the controllerGDPR
32. Security of processingGDPR
5. Principles relating to processing of personal dataGDPR
Personnel guidelines for safe data system and authentication info usage
Critical
High
Normal
Low
47
requirements
System management
Data system management

Personnel guidelines for safe data system and authentication info usage

This task helps you comply with the following requirements

Članak 30.1.j: Korištenje višefaktorske provjere autentičnosti ili rješenja kontinuirane provjere autentičnostiNIS2 Croatia
9.7 §: Pääsynhallinta, todentaminen ja MFAKyberturvallisuuslaki
4.1.3: Management of users in data systemsTISAX
30 § 3.10°: D'authentification à plusieurs facteursNIS2 Belgium
PR.AC-7: Identities are proofed, bound to credentials and asserted in interactions.CyberFundamentals
Treatment process and documentation of occurred security incidents
Critical
High
Normal
Low
74
requirements
Incident management
Incident management and response

Treatment process and documentation of occurred security incidents

This task helps you comply with the following requirements

Članak 30.1.b: Postupanje s incidentima, uključujući njihovo praćenje, evidentiranje i prijavljivanjeNIS2 Croatia
9.9b §: Poikkeamien käsittelyKyberturvallisuuslaki
1.6.2: Management of reported eventsTISAX
30 § 3.2° (incidents): La gestion des incidentsNIS2 Belgium
4.4.2: Review identified compromised security measuresNSM ICT-SP
Avoiding and documenting shared user accounts
Critical
High
Normal
Low
12
requirements
System management
Access control and authentication

Avoiding and documenting shared user accounts

This task helps you comply with the following requirements

I07: Tietojenkäsittely-ympäristön toimijoiden tunnistaminenKatakri
32. Security of processingGDPR
9.2.4: Management of secret authentication information of usersISO 27001
TEK-08: Tietojenkäsittely-ympäristön toimijoiden tunnistaminenJulkri
5.16: Identity managementISO 27001
Monitoring suppliers' compliance with security requirements
Critical
High
Normal
Low
44
requirements
Partner management
Agreements and monitoring

Monitoring suppliers' compliance with security requirements

This task helps you comply with the following requirements

Članak 30.2: Dobavljačka kibernetička sigurnost i riziciNIS2 Croatia
1.2.4: Definition of responsibilities with service providersTISAX
30 § 4°: Définir et contrôler les mesures de sécurité requises pour la chaîne d'approvisionnementNIS2 Belgium
2.1.10: Review the service provider’s security when outsourcingNSM ICT-SP
ID.SC-3: Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybersecurity program and Cyber Supply Chain Risk Management Plan.CyberFundamentals
Amount, competence and adequacy of key cyber security personnel
Critical
High
Normal
Low
37
requirements
Risk management and leadership
Cyber security management

Amount, competence and adequacy of key cyber security personnel

This task helps you comply with the following requirements

T03: Turvallisuustyön resurssitKatakri
32. Security of processingGDPR
37. Designation of the data protection officerGDPR
6.1.1: Information security roles and responsibilitiesISO 27001
ID.GV-2: Cybersecurity role coordinationNIST
Process for initiating data breach treatment
Critical
High
Normal
Low
9
requirements
Incident management
Data breach management

Process for initiating data breach treatment

This task helps you comply with the following requirements

24. Responsibility of the controllerGDPR
32. Security of processingGDPR
16.1.5: Response to information security incidentsISO 27001
16.1.7: Collection of evidenceISO 27001
5.26: Response to information security incidentsISO 27001
General security competence and awareness of personnel
Critical
High
Normal
Low
42
requirements
Risk management and leadership
Cyber security management

General security competence and awareness of personnel

This task helps you comply with the following requirements

Članak 29.b: OsposobljavanjaNIS2 Croatia
10 §: Johdon vastuuKyberturvallisuuslaki
2.1.3: Staff trainingTISAX
2.1.1: Competence of employeesTISAX
31 § 2°: Formation des cadres supérieurs à la cybersécuritéNIS2 Belgium
Designation of data set owners
Critical
High
Normal
Low
12
requirements
Management of data sets
Management of data sets

Designation of data set owners

This task helps you comply with the following requirements

T07: Tietojen luokitteluKatakri
13 §: Tietoaineistojen ja tietojärjestelmien tietoturvallisuusTiHL
15 §: Tietoaineistojen turvallisuuden varmistaminenTiHL
32. Security of processingGDPR
8.1.2: Ownership of assetsISO 27001
Minimization of information outside data systems
Critical
High
Normal
Low
7
requirements
Management of data sets
Management of data sets

Minimization of information outside data systems

This task helps you comply with the following requirements

32. Security of processingGDPR
8.1.3: Acceptable use of assetsISO 27001
8.3.1: Management of removable mediaISO 27001
9.4.4: Use of privileged utility programsISO 27001
A.11.2: Restriction of the creation of hardcopy materialISO 27018
Anonymization of personal data
Critical
High
Normal
Low
2
requirements
Privacy
Privacy by design and default

Anonymization of personal data

This task helps you comply with the following requirements

32. Security of processingGDPR
8.11: Data maskingISO 27001
Pseudonymisation of personal data
Critical
High
Normal
Low
2
requirements
Privacy
Privacy by design and default

Pseudonymisation of personal data

This task helps you comply with the following requirements

32. Security of processingGDPR
8.11: Data maskingISO 27001
Privacy-related codes of conduct and certification
Critical
High
Normal
Low
2
requirements
Privacy
Processing principles and accountability

Privacy-related codes of conduct and certification

This task helps you comply with the following requirements

32. Security of processingGDPR
TSU-15: OsoitusvelvollisuusJulkri
Complete these tasks in Cyberday ISMS ->

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way‍
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Start free trial
Effortless compliance improvement
Widest framework library in EU
Extensive support

Start your compliance journey

Use in MS Teams or use your browser with Slack integration.
Risk free trial. No credit card required. Stop at any time.

Start free 14-day trial
Book a meeting
How it works?
SummarySecurity tasks and assuranceDocumentation workflowsEmployee guidelinesReporting templates
Use cases
By frameworkAll frameworksISO 27001NIS2 directiveNIST CSFCSA CCMISO 27701GDPRISO 27017ISO 27018
By methodCyber risk managementEmployee awarenessCompliance reportingControl managementAsset managementPrivacy managementVendor assessments
Resources
AcademyWebinarsBlogHelp articlesVideo coursesContent libraryGuidesNewsletterLeave a reviewPartner programTeamTerms of usePrivacy policy
Contact us
+358 10 231 6010
team@cyberday.ai
App works in:
Known in Finland as Digiturvamalli
© Cyberday Inc. Kalevantie 2 33100 Tampere, Finland
Cyberday.ai - Improve and certify your cyber security