GDPR subcontractor risk analysis system for Data Controllers

The product is recommended for data controllers. 

G&M Tools' GDPR Risk Management System™ system determines from the data controller's point of view which of its subcontractors/data processors pose which GDPR risk based on the statements received.

 

The Data Processors participate in a GDPR "audit", where they undertake in a statement the veracity of the information provided during the risk analysis about their data management processes, the technical and regulatory protection measures implemented in their IT system. 

 

Most Data Controllers currently only control their subcontractor data processing obligations with the help of a legal contract, which all subcontractors (Data Processors) signed without question due to the dependency relationship in order to keep the orders. Regardless of the legal contract, the official fine will be imposed on the Data Controller even in the event of a mistake by its subcontractor. Unfortunately, incidents cannot be avoided by signing legal contracts, the introduction of appropriate information security control (regulatory and technical) is necessary to avoid them. 

We help you determine which Data Processor poses the greatest risk to YOUR organization. 
 

Based on the declaration of the contractor performing the test, the risk management system determines, on the basis of the implemented organizational and technical measures, the extent to which the Data Controller is exposed to a possible GDPR penalty due to mistakes made by its subcontractors. It proposes an action plan to deal with each of the identified problems. The GDPR regulation requires a regular review, but also due to the numerous changes in the law and the changes resulting from the natural development of the organization - it is advisable to regularly repeat and update the check every year.