Challenges & Needs

• No Data Mapping Measures in Place: The client had never undertaken any type of meaningful data mapping exercise with regards all of their business lines.
• Unsure of the Types and Categories of Data. From unclassified to classified and top secret data, the client had no formalized data categorization modeling in place.
• Unsure of the Legal Requirements for Data Protection and Retention: There were conflicting views in terms of how data should be protected, how long it should be kept, and what the actual disposal practices were.

Our Solution

• Met with senior leadership and provided a complete strategy and plan-of-attack for designing, deploying, and implementing a robust, data mapping exercise from the ground up.
• Met with key stakeholders within various departments/divisions for the organization, earning acceptance and support for what would be an aggressive timeframe for project implementation and completion.
• Identified gaps and deficiencies within the client’s information security, cybersecurity, data privacy, and H.R. and operational control environment, offering expert recommendations on remediation and next-steps.

Challenges Solved

• Successfully remediated security, technical, and operational control gaps found during the initial data mapping assessment activities.
• Corrected all known control deficiencies relating to the organization’s entire data lifecycle, resulting in a significant improvement regarding the safety and security of information systems and other assets that store, process, and transmit data.
• Put in place a highly customized data privacy program, complete with a new data categorization system that fully met the client’s needs and overall expectations.
• Conducted in-house training to all stakeholders on how to execute the data categorization program to all external suppliers.
• Developed all required data privacy program documentation, complete with policies, procedures, and processes.

Value Created

• Put in place a corporate culture that now understands, respects, and truly values the importance of sound data governance practices.
• Data privacy, data mapping, data categorization - in essence, the broader topic of data governance - was now viewed in a multi-dimensional value proposition that not only helps with stronger information security, but with enhanced business development opportunities, and increased client satisfaction and other related measures.