GDPR puts vendor contracts in the security spotlight. Issue 4 (April 2018)

• Record Type: Journal Article
• Authors: Brook, David
• Is Part Of: Computer fraud & security. Issue 4(2018)
• Page Start: 5
• Page End: 7
• Publication Date: 2018-04
• Subjects: Computer crimes -- Periodicals; Computers -- Access control -- Periodicals; 364.168
• DOI: 10.1016/S1361-3723(18)30031-9
• Languages: English
• ISSNs: 1361-3723

Abstract

Abstract : However, this needn't be an onerous task. In fact, as David Brook of Turnstone Services points out, successful contract reviews can bring broader benefits. Each contract term relating to data security can be clarified and strengthened as part of a tighter, more comprehensive IT security policy. The EU's General Data Protection Regulation (GDPR), which is about to come into force, requires the contracts between an IT department and its suppliers to be reviewed and updated. 1 However, successful contract reviews can bring broader benefits – and to IT security in particular.