Cursos
Value: 2180 €
Timetable:
Monday, Wendsday and Thrusday from 18:00 H to 22:00 H
Format: Online
N. Hours: 30 H
During: 4 weeks
- Alternative Title(s)
- Data Protection Officer (DPO)
- Privacy Protection Officer
- Cyber Law Consultant
- Cyber Legal Adviso
- Information Governance Officer
- Data Compliance Officer
- Cybersecurity Legal Officer
- IT/ICT Compliance Manager
- Governance Risk Compliance (GRC) Consultant
- Summary Statement
Manages compliance with cybersecurity-related standards, legal and regulatory frameworks based on the organisation’s strategy and legal requirements.
- Mission
Oversees and assures compliance with cybersecurity- and data-related legal, regulatory frameworks and policies in line with the organisation’s strategy and legal requirements. Contributes to the organisation’s data protection related actions. Provides legal advice in the development of the organisation’s cybersecurity governance processes and recommended remediation strategies/solutions to ensure compliance.
- Deliverable(s)
- Compliance Manual
- Compliance Report
- Main Task(s)
- Ensure compliance with and provide legal advice and guidance on data privacy and data protection standards, laws and regulations
- Identify and document compliance gaps
- Conduct privacy impact assessments and develop, maintain, communicate and train upon the privacy policies, procedures
- Enforce and advocate organisation’s data privacy and protection program • Ensure that data owners, holders, controllers, processors, subjects, internal or external partners and entities are informed about their data protection rights, obligations and responsibilities
- Act as a key contact point to handle queries and complaints regarding data processing
- Assist in designing, implementing, auditing and compliance testing activities in order to ensure cybersecurity and privacy compliance
- Monitor audits and data protection related training activities
- Cooperate and share information with authorities and professional groups
- Contribute to the development of the organisation’s cybersecurity strategy, policy and procedures
- Develop and propose staff awareness training to achieve compliance and foster a culture of data protection within the organization
- Manage legal aspects of information security responsibilities and third-party relations
- Key Skill(s)
- Comprehensive understanding of the business strategy, models and products and ability to factor into legal, regulatory and standards’ requirements
- Carry out working-life practices of the data protection and privacy issues involved in the implementation of the organisational processes, finance and business strategy
- Lead the development of appropriate cybersecurity and privacy policies and procedures that complement the business needs and legal requirements; further ensure its acceptance, comprehension and implementation and communicate it between the involved parties
- Conduct, monitor and review privacy impact assessments using standards, frameworks, acknowledged methodologies and tools
- Explain and communicate data protection and privacy topics to stakeholders and users
- Understand, practice and adhere to ethical requirements and standards
- Understand legal framework modifications implications to the organisation’s cybersecurity and data protection strategy and policies
- Collaborate with other team members and colleagues
- Key Knowledge
- Cybersecurity related laws, regulations and legislation
- Cybersecurity standards, methodologies and frameworks
- Cybersecurity policies
- Legal, regulatory and legislative compliance requirements, recommendations and best practices
- Privacy impact assessment standards, methodologies and frameworks
- e-Competences (from e-CF)
A.1. Information Systems and Business Strategy
Alignment (Level 4)
D.1. Information Security Strategy Development (Level 4)
E.8. Information Security Management (Level 3)
E.9. IS-Governance (Level 4)
Documentação
