Data Privacy Readiness Test
1 like4,027 views
The document is a data privacy readiness test that consists of 11 questions about an organization's ability to comply with various data privacy requirements when storing data in the cloud. These requirements include ensuring data residency within specific regions, restricting vendor access to data, enabling user privacy settings, and providing full auditability and role-based access for compliance, investigations, and litigation. If an organization answers "no" or "I don't know" to more than a few questions, the document suggests it should look to strengthen its approach to data privacy.
Data Privacy Readiness Test
- 1. LEARN MORE AT DRUVA.COM/PRIVACY DATA PRIVACY READINESS TEST Global enterprises need to be prepared for the new world of data privacy. Review the following privacy requirements for any data stored in the cloud. How is your organization keeping up? DATA RESIDENCY: LOCAL ADMIN: 1 2 Does your IT admin have the ability to determine regions for data storage? Yes No I don’t know VENDOR PRODUCTION: 3 Are vendors prevented from accessing stored data or metadata? Yes No I don’t know Yes No I don’t know Can IT admins be segregated and delegated with pre-defined granular access rights? OFFICER DATA: DATA AUDITING 7 8 Are there policy group settings for classes via Active Directory (Officers, Legal, etc.) to restrict data visibility? Yes No I don’t know TRACKING & MONITORING: 9 Is monitoring proactive and based on data classifications? Yes No I don’t know Yes No I don’t know Can data be fully audited for compliance monitoring for PHI and PII? INDIVIDUAL PRIVACY: DATA SEGREGATION: 4 5 Can end users control privacy settings or opt out of admin data, metadata or audit trail visibility? Yes No I don’t know EMPLOYEE (DPA): 6 Are there exclusionary settings for the data backup and collection process, with admin visibility to audit trails restricted via policy? Yes No I don’t know Yes No I don’t know Is corporate data on laptops and smart devices containerized? REGIONAL PRIVACY CORPORATE PRIVACY EMPLOYEE PRIVACY SCENARIO-BASED PRIVACY COMPLIANCE: INVESTIGATIONS & eDISCOVERY 10 11 Are there delegated roles for compliance and legal counsel? Yes No I don’t know Yes No I don’t know Is there full data and audit trail access for addressing the unique privacy requirements posed by compliance, investigation and litigation? If you answered “No” or “I don’t know” to more than a few of these questions, it’s time to look into strengthening your data privacy stance. TO LEARN MORE, READ OUR WHITE PAPER: Is the Enterprise Ready for the New World of Data Privacy?