34% of SA organisations ready to comply with PoPIA
February 2019, News, Security Services & Risk Management
Sophos has issued the findings of a new study today that was commissioned to determine the state of PoPIA compliance within South African organisations.
The PoPI Act (Protection of Personal Information) promotes the protection of personal information by public and private bodies, was signed into law in 2013. It is expected to come into effect during 2019 after which organisations will have two years to comply.
The Sophos-commissioned survey revealed that only 34% of survey respondents felt their organisation was going to be ready to meet PoPIA requirements. This means that more than half of the organisations have yet to put the right processes and technology in place to protect personal data, which could see them having to pay heavy fines to the supervisory authority if the Information Regulator reveals non-compliance with PoPIA legislation.
The study further revealed that an overwhelming majority of respondents (77%) believe that their organisation will suffer reputational damage if fines for non-compliance were imposed. The reputational damage can be more damaging than the financial penalties, as it involves loss of good will and customer trust.
Pieter Nel, regional manager, Sophos South Africa, commented, “The best way to prepare for PoPIA is to implement a solid data protection strategy that guards against loss of data whether through malicious or accidental methods. Creating a data protection strategy can be a daunting process, especially if it hasn’t previously been a focus area for organisations. Securing against major threats that cause data breaches is a great place to begin.”
Other key findings of the survey include:
• Only 10% of respondents indicated that their organisation has a dedicated PoPIA team.
• Two thirds of respondents felt they had a good understanding of the legislation, but almost 30% admitted to only a basic understanding of the Act.
• Over half of the respondents (62%) have placed a high priority on PoPIA within their organisation.
Nel continues, “Even if organisations don’t have dedicated PoPIA teams, we would recommend that there should be some ownership and responsibility to make the organisation PoPIA compliant. However, without a clear understanding, there will always be some lapse in PoPIA implementation. Even if an organisation outsources it to a third party, it is crucial that the organisation have a deep internal understanding of the PoPI Act and its influence on the organisation.”
He concludes, “High priority in terms of PoPIA compliance should translate to readiness of the organisations; without a concrete action plan, organisations will lag behind. Unfortunately in terms of data breaches, nobody knows when or where it is going to strike next, which is why being prepared is so important.”
The survey can be viewed here: https://www.sophos.com/en-us/medialibrary/pdfs/marketing-material/protection-of-personal-information-survey-report-2018.pdf
|
|
|
|
|
|
Further reading:
- From the editor’s desk: IoT is you
March 2019, Technews Publishing, News
A search on the Internet for articles and comments on the convergence of physical and digital security shows that the topic was quite popular a few years ago, but then tapered off. Lately it has reared ...
- SAIDSA celebrates 50-year anniversary
March 2019, SAIDSA (SA Intruder Detection Services Association, Associations, News
Fifty years ago, the association was formed as an employer’s organisation, with the vision of providing a pension fund to its members and to investigate improving the standards of an ever-growing industry.
- Using security to enhance the customer experience?
March 2019, Axis Communications SA, Fidelity ADT Security, ISDS, This Week's Editor's Pick, CCTV, Surveillance & Remote Monitoring, Integrated Solutions, Security Services & Risk Management, Retail (Industry)
Customer experience will overtake price and product as the key retail brand differentiator by the year 2020. Will the security industry be part of this transformation?
- Where guards and technology meet
March 2019, Fidelity Security Group, Xone Integrated Security, Security Services & Risk Management
Many of the smart technologies coming to market aim to eliminate or at least manage the human element, but in South Africa in particular, manned guards are still ubiquitous.
- Two-way radio is alive and well
March 2019, Global Communications (Member of Hudaco Group), Security Services & Risk Management
Digital technology has given two-way radios a new lease on life by offering significant advantages over analogue technology.
- UTC to separate into three companies
March 2019, UTC Fire & Security SSA, News
United Technologies Corporation announced the company’s intention to separate its commercial businesses into three companies.
- Changing the security landscape
March 2019, Technews Publishing, This Week's Editor's Pick, News, Security Services & Risk Management
Using smart technology and an intelligent platform, Aura has a vision to reduce crime in South Africa by 50% by 2025.
- New cybersecurity pavilion for Securex 2019
March 2019, Securex South Africa , This Week's Editor's Pick, Cyber Security, News, Conferences & Events, Training & Education
Securex South Africa 2019 has announced that 4Sight Technologies, a subsidiary of an international holdings company focusing on investing in Industry 4.0 companies, has signed on as the official sponsor ...
- ISDS focuses on distribution
March 2019, ISDS, News, Integrated Solutions
David Heenan, MD of ISDS, told Hi-Tech Security Solutions that the company has restructured and will now focus on distribution and supporting its channel partners.
- Ewers appointed as director at ZYTEQ
March 2019, ZYTEQ Fire, News, Fire & Safety
ZYTEQ Fire has announced the appointment of Terence Ewers as sales director responsible for sales and business development.
- MST focuses on projects and skills
March 2019, Mustek Security Technologies, Technews Publishing, Integrated Solutions, News
Mustek Security Technologies is a systems integrator doing project work for National Key Points and other clients.
- MIPS EMEA 2019
March 2019, Milestone Systems, News, CCTV, Surveillance & Remote Monitoring, Integrated Solutions
Milestone Systems will kick off Community Days 2019 (MIPS) in Copenhagen, with more than 1500 participants and input from leading industry professionals.
|
|
