What will you learn?

This course will provide an introduction, awareness and overview of data protection and the GDPR, including aspects of the new British Data Protection Bill which will incorporate GDPR into British Law.  It will be linked to several IISP skills groups, notably the Legislative Environment, Governance, Risk Management and the practical aspects of preparation and on-going compliance. The course does not have any training, professional or academic prerequisites and does not include any self-study.  However, it will include some practical application aspects and will include a short assessment of learning achieved.  The course will provide evidence that may support professional accreditations and continuous professional development (CPD).

Accreditation

Mapped to Institute of Information Security Professionals (IISP) subject modules at Awareness level. Level 1: A1 – Governance A6 – Legal & Regulatory Environment B1 – Risk Assessment B2 – Risk Management

Course Materials

PDF of slides and short aide-memoire.

Who Should Attend?

This course is aimed at those who must execute governance (boards and executive management); provide risk management and functional advice to boards, executive and senior managers.  Plus, those who wish to enhance their knowledge of data protection and GDPR as part of continuous professional development (CPD) or for a potential career move.

Course Duration

The GDPR Data Protection Awareness Course will be covered throughout the course of 1 day.

What will you learn?

This course will build upon the Awareness course and provide a more detailed insight and understanding of data protection and the GDPR, including aspects of the new British Data Protection Bill.  It will be linked to several IISP skills groups, notably the Legislative Environment, Governance, Risk Management, Capability (people, process and technology) and the practical aspects of preparation and on-going compliance. The course will include self-study and provide a number of practical and hands-on scenarios to apply knowledge and skills to.  There will also be a formal examination to achieve the certification and to support other professional accreditations and CPD.

Accreditation

Mapped to Institute of Information Security Professionals (IISP) subject modules at Practitioner level only.

Awareness Level

A1 – Governance A6 – Legal & Regulatory Environment B1 – Risk Assessment B2 – Risk Management

Practitioner Level

A3 – Information Security Strategy A5 – Awareness and Training A7 – Third Party Management G1 – Audit and Review; and F1 – Incident Management

Course Materials

PDF of slides and Practitioner Guidance Notes (over 80 pages) and forms the basis of self-study as evening work.

Who Should Attend

This course is aimed at Data Protection Officers (DPOs) and those requiring a more detailed knowledge to support organisational change and on-going compliance.  It will develop knowledge and skills required, by focusing upon experiential learning through the use of interactive scenarios that a DPO is likely to encounter.

Course Duration

The GDPR Data Protection Practitioner Course will be covered throughout the course of 4 days.

Issue

Data Protection & GDPR for recruitment professionals.

Aim

The aim of this Data Protection & GDPR for Recruitment Course is to provide delegates with the fundamental knowledge and awareness of the UK’s Data Protection Act 2018 (DPA 2018) and the GDPR and how they apply to recruitment.  Including the measures and actions you need to consider for compliance when undertaking recruitment processes.

Learning Outcomes

On completion of the course delegates will be able to;

• Demonstrate basic understanding of Data Protection principles and data subjects’ rights;
• How to identify potential data breaches and what to do;
• Describe the key components of Data Protection & GDPR, with reference to recruitment functions;
• Understand how the Data Protection principles and GDPR can be applied to recruitment processes to protect both data subjects and recruitment companies; and
• Apply a Data Protection Impact Assessment (DPIA) to a recruitment scenario

Outline Data Protection for Recruitment Course Programme

Understanding the DPA 2018 and GDPR:

• When and Where the legislation applies
• Why the legislation has been introduced
• What personal data is, especially in the recruitment context
• Who is involved in the legislation
• How to apply and implement the legislation in the recruitment context; and
• Practical Group Exercise: Recruitment DPIA Scenario

Benefits

Participant’s and their parent company’s will benefit from attendance as follows:

• Awareness understanding of DPA 2018 & GDPR and how it applies to recruitment.
• Practical approach to managing Data Protection & GDPR within recruitment functions.
• Evidence of specific competence training in GDPR for Recruitment Professionals

Recommended Participants

The course is suitable for any recruitment personnel.

Duration

Half-day – 0930-1230

Issue

Data Protection and GDPR for HR Professionals.

Aim

The aim of this Data Protection & GDPR for HR Professionals Course is to provide delegates with the fundamental knowledge and awareness of the UK’s DPA 2018 and GDPR, and how to apply effective risk management and data protection by design and by default.

Learning Outcomes

• Describe the key components of Data Protection and GDPR, with particular reference to HR functions.
• Understand the risk-based approach to Data Protection to be GDPR compliant when delivering HR functions.
• Understand the types of organisational and technical measures to deliver data protection by design and by default in HR functions.
• Apply the Data Protection Principles to a HR scenario

Outline Data Protection & GDPR for HR Professionals Course Programme

Understanding the DPA 2018 and GDPR:

• When and Where the legislation applies
• Why the legislation has been introduced
• What personal data is, especially in the HR context
• Who is involved in the legislation
• How to apply and implement the legislation in the HR function
  • Data Protection Impact Assessments (DPIA) and Data Protection by Design and by Default for HR
  • Practical Group Exercise: HR DPIA Scenario
  • Next Steps Roadmap

Benefits

Participant’s and their parent company’s will benefit from attendance as follows:

• Awareness understanding of Data Protection & GDPR and how it applies to HR.
• Practical approach to managing Data Protection & GDPR within HR functions.
• Evidence of specific competence training in Data Protection & GDPR for HR professionals.

Recommended Participants 

The course is suitable for any HR personnel.

Duration

Half-day – 0930-1230

Issue

Aligning regulatory requirements of MiFID II, Data Protection Act 2018 and GDPR.

Aim

The aim of this of MiFID II, Data Protection & GDPR Alignment Awareness Course is to provide delegates with the fundamental knowledge and awareness of the MiFID II, DPA 2018 and GDPR, and how to apply effective governance and risk management, to deliver compliance with the requirements of the Directive and Regulations.

Objectives

Benefits

Participant’s and their parent company’s will benefit from attendance as follows:

• Understanding the relationship between Data Protection & GDPR and MiFID II (members core business).
• Practical GRC approach to aligning Data Protection & GDPR to MiFID II requirements.
• Evidence of specific management competence training in aligning MiFID II, with Data Protection & GDPR.Recommended Participants. The course is suitable for anyone with Governance, Risk Management and Control roles or responsibilities, including but not limited to those who must demonstrate SM&CR competence which overlaps with data protection; plus, legal, Data Protection Officers and staff and IT, security and HR personnel

Duration

One day – 0930-1600

Issue

Understanding cyber risks and developing organisational cyber resilience.

Aim

The aim of this course is to develop the governance, risk management and capability of an organisation so they can become more cyber resilient. Resilience is a relative state, not an absolute state and reflects that absolute security is impossible.  The course covers three themes: governance, risk management and capability.

Learning Outcomes

On completion of the course delegates will be able to:

Issue

Understanding cyber risks and developing organisational cyber resilience.

Aim

The aim of this course is to develop the governance, risk management and capability of an organisation so they can become more cyber resilient. Resilience is a relative state, not an absolute state and reflects that absolute security is impossible.  The course covers three themes: governance, risk management and capability, tailored to Managers.

Learning Outcomes

On completion of the course delegates will be able to: