RiskUKSeptember2017

News Update
“Employees pose greatest EU GDPR
compliance risk” highlights latest
Bluesource study
Six-in-ten organisations view their employees
as the biggest threat to successful EU General
Data Protection Regulation (GDPR) adherence,
while four-in-ten believe that their current IT
systems could also pose compliance risks.
That’s according to a GDPR awareness survey
conducted by Bluesource.
The study also highlights that, even though
half (50%) are taking steps to prepare for
GDPR compliance, nearly a third (30%) still
believe that the new rules will not affect them.
One fifth (20%) are not sure what to do next.
Over 80% of respondents stated that, with
the deadline for EU GDPR compliance rapidly
approaching, they’re facing a major challenge,
including increased security and governance
around cloud environments such as Office 365
and shadow IT. 80% of those surveyed feel
that ‘Big Tech’ vendors have a responsibility to
ensure that their own systems will meet the
GDPR’s requirements, as well as those of their
customers, but are unsure as to how this will
be achieved in practice.
The increased financial impact of fines and
the expected frequency of their enforcement is
a major concern for most of those surveyed.
An overwhelming 90% indicated that a noncompliance
fine would result in reputational
damage for their organisation and a loss of
trust among customers, suppliers and staff.
Data breaches are already the second
greatest cause of concern for business
continuity professionals and, once this new
legislation comes into force, bringing with it
higher penalties than already exist, this level
of concern is only likely to increase.
Organisations need to make sure they’re
completely aware of the requirements of the
GDPR, and also make certain that their data
protection processes are robust enough to
meet these requirements.
On a more positive note, 45% of those
surveyed have already nominated a member of
a specific departmental function – including
legal, compliance and IT security – to be solely
dedicated to privacy and GDPR initiatives.
However, 20% haven’t considered selecting a
nominated individual as yet, while 35%
suggest that finding a suitably qualified and
experienced individual will be a challenge.
Sean Hanford, information governance
consultant at Bluesource, commented: “Our
research across UK organisations indicates
that a gap remains between EU GDPR
awareness and action. There must be a swift
attitude change towards data protection. Staff
clearly require better skills such that they can
become more data savvy.”
Her Majesty’s Inspectorate of
Constabulary’s remit extended by
Home Office to encompass Fire and
Rescue Services
Building on the experience of Her Majesty’s
Inspectorate of Constabulary (HMIC) in
inspecting and reporting on the efficiency and
effectiveness of all police forces in England
and Wales, Nick Hurd (Minister for Policing
and the Fire Service) has announced that it
will now extend its responsibility and also
inspect Fire and Rescue Services in England.
In order to reflect this new programme of
inspections, HMIC will change its name to Her
Majesty’s Inspectorate of Constabulary and
Fire and Rescue Services (HMICFRS) and
expand to become a fully-integrated
inspectorate for the police and Fire and
Rescue Services. HMICFRS will have a new
logo to reflect its new identity.
Her Majesty’s Chief Inspector of
Constabulary, Sir Thomas Winsor (pictured),
said: “This marks a momentous chapter in the
160-year history of HMIC. We will draw on our
experience of inspecting and reporting on
police forces to develop a framework to assess
the efficiency and effectiveness of the 45 Fire
and Rescue Services in England. In the same
way that police officers run towards situations
that others would instinctively avoid, the
events of recent times remind us all about
exactly how much we rely upon the bravery
and professionalism of our firefighters. I pay
tribute to their courage.”
Sir Thomas will be appointed Her Majesty’s
Chief Inspector of Fire and Rescue Services, in
addition to continuing in his role as Her
Majesty’s Chief Inspector of Constabulary. Her
Majesty’s Inspector Zoë Billingham will act as
the lead for the inspection programme. Each
HMI will have responsibility for a number of
Fire and Rescue Services.
Nick Hurd explained: “Creating an
inspectorate for Fire and Rescue Services in
England will support the continuous
improvement of this critical public service to
make sure that it’s as professional, effective
and efficient as possible. It will also ensure
that, where problems are identified, actions
can be taken by the Fire and Rescue Services
to overcome them. I’m confident that HMIC
will hold Fire and Rescue Services to the
highest standards possible.”
HMICFRS inspections will be specifically
designed to promote improvements.
7
www.risk-uk.com