GDPR GAP Analysis

evaluating thoroughly the level of compliance

in data protection at a specific moment

Small Organisation GAP Analysis

Introduction

As the implementation date for GDPR has now passed (25/5/18) if you are worried about your compliance position then you need our DPA 2018 (GDPR) GAP analysis report.

Our data protection consultants will assess your organisation’s privacy management and data protection practices through an on-site review of the following:

I

Your Data Protection Governance & Processes

I

Your GDPR project resourcing

I

Your position with respect to a Data Protection Officer (DPO)

I

Your organisational Roles and Responsibilities

I

Your Scope of compliance

I

Your Personal Information Data Processes

I

Your Personal Information Management System (PIMS) – if applicable

I

Your Information Security Management System (ISMS) & processes

I

Your Rights of Data Subjects & processes

The result is a DPA 2018 (GDPR) Compliance report. This will enable you to evaluate your position and what you need to do next to move towards GDPR compliance.

Image of two people with laptop consulting notes

Why choose us?

Henderson Services  consultants are both qualified and have an in-depth understanding of the DPA 2018 (GDPR) requirements and how pragmatically they should be met.

We can provide a complete compliance support service to help organisations prepare for and adapt to the GDPR including:

I

Undertaking Data flow audits

I

Producing small organisation Gap analysis reports

I

Delivering Bespoke transition services

I

Producing small organisation Gap analysis reports

Our team has extensive Data Protection and Information Security management project expertise including government network accreditation projects.

What to do now?

Call us on +44 (0) 7831 397118 or use the Contact Us form to arrange a free consultation to see how we can help your organisation.

Data Protection Governance

Henderson Services  will review the Data Protection Governance procedures and practices operating within the organisation and compare them with the requirements of the DPA 2018 (GDPR).

Risk Management – Approach & Appetite

Henderson Services  will review and discuss the way in which your organisation manages risk and what the risk appetite is within the organisation.

GDPR Resourcing

Henderson Services  will review (if applicable) the resources currently allocated to GDPR and make recommendations accordingly.

Data Protection Officer

Henderson Services  will review any decisions taken regarding a Data Protection Officer and recommend whether or not a Data Protection Officer is appropriate. 

Organisation Roles & Responsibilities

Henderson Services  will review the organisational roles and responsibilities (with respect to Data Protection, Processing and Cyber Security) that support your organisation and make appropriate recommendations.

Scope of Compliance

Henderson Services  will review the scope of your compliance with the DPA 2018 (GDPR) regulations.

Personal Information Data Processes

Henderson Services  will discuss and quickly review the Personal Data Information Processes that are operating within the organisation.

PIMS – If Applicable

If applicable Henderson Services  will review any Personal Information Management System that is operating within the organisation.

Information Security & Processes

Henderson Services  will review those Information Security processes that are operating within the organisation and make appropriate recommendations based on industrial best practices.

Rights of Data Subjects & Processes

Henderson Services  will review the Procedures and processes that have been established within the organisation to respond to Data Subjects exercising their rights under the GDPR and make appropriate recommendations based on best practice.

Restrictions & Conditions

The price quoted applies to single-entity organisations with up to 20 staff and with all key personnel (senior management, HR managers, compliance, IT, sales, marketing and procurement) based at a single site (unless agreed otherwise).

The fee excludes any necessary travel, accommodation and subsistence expenses. Expenses will be assessed and charged in arrears.