VSEC - Compliance

Integrated Compliance Guide:
Explore UK Top 4 Regulations

GDPR, NIS Directive, Minimum Security Standards and Cyber Essentials
2018 has been a disruptive year for IT teams, CISOs and compliance officers, with new regulations, industry standards and audit requirements drawing time and resources where the two are already stretched. You almost certainly will have come face to face with at least one of six compliance and regulatory changes in the UK.

Compliance

Compliance is a critical component of any security program and is a legal concern for organisations in many industries today. Regulatory standards like GDPR, Cyber Essentials, NIS Directive, Minimum Security Standards and ISO 27001 propose recommendations for protecting data and improving information security management in the organisation. Infinigate’s Compliance Hub is a central resource that has a wealth of materials written by compliance and GDPR experts to help you make sense of various regulations and provides practical, no-nonsense advice on how to comply. You will find whitepapers, videos, infographics, podcasts and more.

UK Top 4 Compliance Regulations

The General Data Protection Regulation

Undoubtedly, the most famous of them all. The GDPR came into force on May 25th of 2018 and affects almost all organisations in a European member state, including the UK.

The major focus of this regulation was to harmonise Europe’s fragmented and localised data protection legislation and increase the accountability for processing data subject’s personal data.

Network & Information Systems (NIS) Directive

Over shadowed by its larger and more controversial European legislative cousing (the GDPR), the NIS directive hasn’t really arrived with the fanfare that it deserved.

Targeted toward two distinct camps, the fundamental purpose for the directive is to ensure that those services and their providers upon which we are heavily reliant on, such as energy, water and now internet services, are resilient against cyber-attacks.

Minimum Security Standards

June of 2018 saw the release of the Minimum Cybersecurity Standard from the UKs National Cyber Security Centre (NCSC). A minimum standard of security which is to be achieved by all government departments, organisations, bodies and contractors, without exception.

The standard has been broken down into 10 parts and grouped into five sections.

Cyber Essentials

Open to both public and private organisations, the Cyber Essentials programme is seen a minimum-security level which all organisations in the UK should achieve. Your customers, suppliers and partners can be secure in the knowledge that your IT network meets an accepted definition of “secure”.

Resources

Product Roadmap

For some, it might have felt like the GDPR was a little bit of an anti-climax. Relative hysteria in the build up to May...

Whitepaper

Integrated Compliance Guide:
Explore UK Top 4 Regulations

Compliance