Hawsons & GDPR
Hawsons steps to GDPR compliance
Hawsons takes all reasonable steps to protect personal and commercially sensitive data. Hawsons uses an Information Security Management System (ISMS) which helps identify and manage risks to information security.
Hawsons Information Security Management System is based upon a framework initially developed by the European Union Agency for Network & Information Security (ENISA). The framework is risk based and has a foundation of OCTAVE (Operationally Critical Threat, Asset, and Vulnerability Evaluation) principles, attributes and outputs. The risk based methodology adopted is also compatible with other existing standards including:
- PCI DSS
- ISO 27001:2013
- ISO 27014:2013
- HM Government Cyber Essentials
Hawsons ISMS contains appropriate controls (risk mitigating measures) and policies covering:
- Organisation
- People
- Network
- Application and
- Systems
The controls and policies address the risk areas of:
- Legal / Compliance
- Financial
- Productivity
- Reputation and Client Confidence
In addition to the controls and policies of Hawsons Information Security Management System, all Hawsons Partners and staff undertake regular information security training along with awareness testing. Simulated email phishing tests are carried out fortnightly for all Partners and staff and leading encryption software is employed for the transmission of personal and commercially sensitive data.
