Categories Pricing Corporate
Professional eBook

DP&P Strategies, Policies and Plans

Data Protection and Privacy Guide – Vol II

0 Reviews
Language:  English
This book contains a complete set of methods, strategies, plans, policies, audit tools and other practical controls to guide, support and facilitate you to effectively manage personal data.
Professional Plus subscription free for the first 30 days, then $8.99/mo
Access to this title on the bookboon platform

This book describes, in 5 volumes, an Integrated Data Protection and Privacy Management System (DP&P System) and a methodology complemented by a set of various strategies, plans, policies, audit tools and other practical controls to guide, support and facilitate all enterprises, organizations and companies to manage better their personal and sensitive data so that they comply better with all privacy regulations and standards (e.g. EU General Data Protection Directive, due for full implementation across the European Union in May, 2018).

  • Dedications
  • Summary
  1. Data Protection and Privacy Strategies
    1. DP&P Strategy # 1: Privacy Awareness, Communication and Training Strategy
    2. DP&P Strategy # 2: Data Protection Technology Strategy
    3. DP&P Strategy # 3: IT Security Strategy
  2. Data Protection and Privacy Plans
    1. DP&P Plan # 1: Data Protection and Privacy Program
    2. DP&P Plan # 2: Privacy Awareness, Communication and Training Plan
    3. DP&P Plan # 3: Requests, Complaints and Rectification Plan
    4. DP&P Plan # 4: Third-Party Risks Management Plan
    5. DP&P Plan # 5: Integration Activities Plan
    6. DP&P Plan # 6: Data Quality Improvement Plan
    7. DP&P Plan # 7: IT Disaster Recovery Plan
  3. Data and IT Security Plans
    1. Data & IT Plan # 1: Data Security Management Plan
    2. Data & IT # 2: Social Media Governance Plan
    3. Data & IT Plan # 3: IT Security Management Plan
    4. Data & IT Plan # 4: System Development Security Plan
    5. Data & IT Plan # 5: Personal Data Breach Incident Response Plan
  4. Data Protection and Privacy Policies
    1. DP&P Policy # 1: Data Protection Policy
    2. DP&P Policy # 2: Corporate Records Retention and Destruction Policy
    3. DP&P Policy # 3: Data Classification Policy
    4. DP&P Policy #4: Data Quality Policy
    5. DP&P Policy #5: Data Ethics Policy
  5. IT Security Policies
    1. ITSEC Policy # 1: Information Technology (IT) Policy
    2. ITSEC Policy # 2: Information Technology (IT) Security Policy
    3. ITSEC Policy # 3: Password Controls Policy
    4. ITSEC Policy # 4: Security Policy for Personal Computers
    5. ITSEC Policy # 5: Security Policy for Laptops and Smart Devices
    6. ITSEC Policy # 6: Encryption Policy
    7. ITSEC Policy # 7: Backup/Recovery Policy and Procedures
  6. Corporate Management Policies
    1. CM Policy # 1: Confidentiality Policy
    2. CM Policy # 2: Business Ethics Policy
    3. CM Policy # 3: Clean Desk Policy
    4. CM Policy # 4: Workplace Wellness Policy
    5. CM Policy # 5: Occupational Stress Policy
    6. CM Policy # 6: Health and Safety Policy
    7. CM Policy # 7: Controller – Processor Agreement
  7. Data Protection Responsibilities
    1. DP&P Job # 1: Data Protection Officer Job Description
    2. DP&P Job # 2: Information Security Manager Job Description
    3. DP&P Job # 3: Data Quality Roles and Responsibilities
  8. Data Protection Registers
    1. DP&P Register # 1: Business Data Elements Register
    2. DP&P Register # 2: Data Subjects Register
    3. DP&P Register # 3: Personal Data Elements Dictionary
  • Endnotes

About the Author

John Kyriazoglou

John Kyriazoglou obtained a B.A. (Honours) from the University of Toronto, Canada, also earning a Scholastic award for Academic Excellence in Computer Science. John has worked in Canada, England, Switzerland, Luxembourg, Greece, Saudi Arabia and other countries for over 49 years, as a Senior IT manager, Managing Director, IT auditor and consultant, in a variety of clients and projects, in both the private and the public sectors. He has published several books and articles in professional publications, has served in numerous scientific committees and is a member of several professional and cultural associations.

He is currently the Editor-in-Chief for the Internal Controls Magazine (U.S.A.) and consulting on Data Privacy and Security Issues (GDPR, e-Privacy, etc.) to a large number of private and public clients.

To support your organization in any issues related to John's work, books and experience you may contact him, at