Compliance Counsel

Do you need help generating content for your organization's trust profile? We offer security assurance services that include trust profile development, support on security questionnaires, content generation about your organization's compliance & security posture, and audit support. Reach out to info@compliancecounsel.com for more information. We're here to help offer #compliancecounsel

Is your risk program stale? Our team at Compliance Counsel can help you build a customized risk management program that includes policy & procedure templates, a risk register, customized dashboards, and offerings to support your team conduct successful #riskmanagement discussions (we call them risk summits 🗻 ). We help technology companies and start-ups build risk management programs based on ISO 31000 and NIST frameworks that fit the needs for their team. This is #compliancecounsel

Why are trust portals so powerful? A trust portal is a resource center, webpage, or knowledge base that can help your company establish trust with your audience. Trust portals can help your team 1. Demonstrate your commitment to compliance & security 2. Make it easier for your customers to vet your team 3. Showcase your compliance wins  4. Improve customer confidence This is today's #compliancecounsel

We tried our first LinkedIn article this week - did you see our post? Has your team worked with the #LinkedIn articles? We'd love your feedback! This is today's #compliancecounsel https://lnkd.in/gqKJriYq

We get asked this alot... So today, we are going to see if we can explain 'what is compliance' in a way that everyone can understand. This is today's #compliancecounsel

Do you want to build a... #trust portal? We help organizations develop a trust framework to help showcase their compliance & security practices suited for their particular audience. We build comprehensive trust centers, create customer-facing documentation to showcase your compliance wins, and conduct independent assessments to gauge your trustworthiness. Reach out to us to learn more about our work at Compliance Counsel This is #compliancecounsel

"We're putting people back in control of who they are, what they think, and how they live their lives," Energy and Commerce Chair Cathy McMorris Rodgers, R-Wash., said in her opening remarks. Joe Duball was on the ground today for the House legislative hearing on #dataprivacy. His report out is available here: https://lnkd.in/e3Mypn-h

🆕 We have reprimanded Clyde Valley Housing Association (CVHA) for exposing the personal information of 139 people after the launch of a new online customer portal. Read on for more details and guidance on how your organisation can avoid this kind of issue. Clyde Valley Housing Association provides social housing to 3,000 homeowners in the Lanarkshire and East Dunbartonshire areas of Scotland. It’s new customer portal went live on 14 July 2022. ❓ What went wrong? On the same date, a resident logged into the portal and could view personal information about other residents. They reported it to CVHA customer service who did not escalate the issue. The data remained visible for 5 more days until a mass email was sent to residents promoting the new portal to them. Later that day another three residents reported the same issue. These reports were correctly escalated and all portal user accounts were locked, and the portal was then fully suspended. 394 data entries linked to anti-social behaviour were accessible and, of those, 286 contained sufficient information to identify 139 people. 👉 Read the reprimand in full: https://lnkd.in/eFCSwmBx ❓ What happens now? CVHA could have prevented the escalation of the breach at several key moments. We have recommended that Clyde Valley Housing Association should take steps ensure its compliance with data protection law, including: • ensuring rigorous testing is undertaken that focuses on data protection prior to the rollout of a portal in the future; and • conducting a review of data protection training to ensure that training provided is relevant to, and adequate for, the staff members receiving it. ✔️Guidance on staff training Staff training in data protection is an important part of your organisation’s accountability and governance: https://lnkd.in/eMFTuvdV

Ever heard of a 'risk register?' We have! Here at Compliance Counsel, our team of consultants supports risk management program builds, development, maturity, and maintenance. Our #riskmanagement service offerings include: ⭐ conducting a risk summit with your executive team to set the risk tolerance and baseline, ⭐ build a custom risk management program with risk registers, policies & procedures, and executive dashboards, and ⭐ train your team on how to maintain and grow their risk management program. Reach out to us to learn more about our work at Compliance Counsel This is #compliancecounsel

Is your team deep diving into the draft #AmericanPrivacyRightsAct bill that was announced this week? Here's a link to the section-by-section summary that summarizes the proposed 53-page draft bill: https://lnkd.in/e38q5gSs This is today's #compliancecounsel #APRA #privacy