Compliance Training

Responsibility for competence development should be assigned: the governing body and top management ensuring that the resources needed are available and leading by example;

The percentage of eligible workers who completed mandatory, legal or regulatory training (compliance and ethics training included) in the period;

Art.40 designation of a Data Protection Officer (DPO); Art.41 duties of the DPO, including advising the controller/processor, monitoring compliance, training, and cooperating with the Authority.

The organization keeps records showing conformity with the resilience policy and the results achieved, with procedures that protect record integrity covering access, identification, storage, protection, retrieval and disposal;

Treatment options are those of ISO 31000:2018, 6.5.2; evaluation is a prerequisite for the plan, and once legal risks are evaluated the organization must demonstrate their appropriate management or face unwanted litigation and loss.

Management shall be responsible for compliance within their area of responsibility: cooperating with and supporting the compliance function and encouraging personnel to do the same;