Kwiminyaka yakutshanje, i-Ireland iye yafumana utshintsho oluphawulekayo kumsebenzi okude, ingakumbi kubugcisa bayo obuphucukileyo kunye namacandelo eenkonzo zemali. Ngoxa olu tshintsho lunika ububhetyebhetye kunye neengenelo zokusebenza, lukwazisa imingeni enzulu yokhuseleko logcino-lwazi. Ukukhusela ulwazi lobuqu nolweququzelelo ngaphandle kwendawo elawulwayo ye-ofisi kuye kwaba yinto ebalulekileyo. Njengoko amalungiselelo omsebenzi obekelwe kude ehlala ihleli kwiintlangano ezininzi, amashishini ase-Ireland kufuneka ahambele phambili kummandla ontluntlukwano zolawulo, ubuchule obunento eluncedo, kunye noothunywa babantu ukuqinisekisa ukhuseleko kunye nemfihlolo lwe-data.

Ukuqonda Imithetho Yogcino - lwazi EIreland

I-Ireland, njengelungu le-European Union, isebenza phantsi kwe-General Data Protection Regation (GDPR), eyasebenza ngoMeyi 2018. I-GDPR imisela imilinganiselo ephakamileyo yokhuseleko logcino-lwazi, igxininisa ukuphendula, ukubonakala, namalungelo omntu ngamnye. Isebenza nakweyiphi na intlangano elungele ugcino-lwazi lwabemi be-EU, kungakhathaliseki ukuba intlangano isekelwe phi na. Iinkampani zase-Ireland nabasebenzi abakude, ukuvuma akuyo into ekhethekayo, kunokubaluleka okuyimfuneko esemthethweni yokuthwala izigwebo ezibalulekileyo zokungadibani. Iintle zingafikelela ku-4% yokujika okanye izigidi ze-520, ezinokuvela emhlabeni wonke.

IKhomishini yoKhuselo logcino-lwazi yase-Ireland (DPC) ligunya lesizwe elijongene nokunyanzelisa i-GDPR kwi-Ireland. I-DPC iphengulula ngokukhutheleyo iziphumo kunye nokhokelo lwemibandela engokuthobela. Ngaphezu koko, i-Ireland inemithetho yayo yasekhaya, uMthetho wokuKhuselwa kolwazi 2018, owengezelela i-GDPR kwaye unika eminye imithetho, ingakumbi ngokuphathelele ukugcinwa komthetho kunye nokukhululwa kwemiqathango ethile.

Iimeko zomsebenzi ezikude zizisa ulwandiso olukhethekileyo lwe GDPR. Umzekelo, umgaqo wokunciphisa ugcino-lwazi ufuna ukuba kuphela izicelo zogcino-lwazi lobuqu ezifunekayo ziqokelelwe kwaye zicocwe, kodwa ummiselo okude ufuneke uqokelelo logcino-lwazi olwandisiweyo lokujonga okanye ulawulo lwesixhobo. Ngokufanayo, umgaqo wokhuseleko olufanelekileyo nolungelelwaniso lwentlangano . Kuya kuba nzima ukuzalisekisa xa ugcino-lwazi luhamba ngemixokelelwano yasekhaya kunye nezixhobo zobuqu. Izicelo zogcino-lwazi olunolwazi olunento elula kakhulu xa abaqeshwa besebenza kude, njengokuba iinkampani kufuneka zifumane idata ngokukhuselekileyo kwiinkqubo ezabekileyo.

Ukuqonda le mithetho linyathelo lokuqala. Imibutho yase-Ireland kufuneka ngoko iguqulele imigaqo yomthetho kwimigaqo esebenzayo esebenzayo esebenza ngaphandle kwe-ofisi yesithethe. Kwinkcazo ebanzi yeemfuno zeGDPR, tyelela GDPR.eu.

Ucelomngeni Olubalulekileyo Kukhuseleko Logcino - lwazi Olukude EIreland

Ukusingqongileyo okukude emsebenzini kwandisa umphezulu wohlaselo ukwenzela ulwaphuko logcino-lwazi kwaye kwenza kube nzima ukuthobela ulawulo. Iingxaki ziwela kwiindidi ezintathu ezibanzi: ubuchule bokwenza izinto, oothunywashe babantu, kunye nemiqobo elawulayo.

Ubuchule bokwenza izinto

Abasebenzi abakude basoloko bexhomekeke kwiinethwekhi zasekhaya zeWi-Fi, ezisenokungabi nako ukhuseleko oluqinileyo lwezibonelelo zenkampani. Ukumiselwa kwabaphathi abasebenza ngemizila ephezulu, ngaphandle kwe-fekinoloji, kunye nokudibana komsebenzi womnatha kungabhenca ugcino-lwazi ekuthintelweni. Ngaphezu koko, abasebenzi basebenzisa izixhobo zabo siqu (i-BOD) ezinokuthi zingabi nalawulo lokulawula abathengi. Ezi zixhobo zingasulelwa kwi-mavarewe okanye zinxulumane noluntu olungenayo uWi-Fi (umz., kwiivenkile zekofu okanye izithuba zokusebenza) ezinyuka ngakumbi.

Usasazo logcino-lwazi ngaphaya kwe-Internet lelinye icala elibuthathaka. Ngaphandle kokunyanzeleka ukuba kusetyenziswe i-float, ugcino-lwazi oluthunyelwa phakathi komqeshwa kunye neenkqubo zenkampani lungahamba ngaphandle kokufihla. Nangona iinkonzo ezininzi zamafu zinyanzelisa ukuvulwa kombhalo ofihlakeleyo ekuthuthweni nasekuphumleni, ukuqiniswa kwemiqathango kungashiya ugcino-lwazi lubhekile. Ukunyuka kwesithunzi ITH / Abaqeshwa abasebenzisa ii-apps okanye iinkonzo ezingagunyaziswangagunyaziswanga okanye iinkonzo zoncedo olusemgangathweni olufakileyo. Okokugqibezela, ukhuseleko lomzimba olunjengokuba kwesixhobo okanye ukulahleka komcimbiso lunyuswe xa i-trap kunye nezixhobo zeselula zithathwa ngaphandle kweofisi.

Izizathu Zomntu

Abaqeshwa abasebenza kude basenokungalandeli uqeqesho olufanayo nolokukhusela kwiofisi ejongelweyo. Ucoceko lwegama eligqithisiweyo lungaphela, kusetyenziswe ii-password eziqhelekileyo okanye amagama angenamandla aqhelekileyo. Uhlaselo lokuzingela luxhaphakile ngexesha lesifo esibulalayo kwaye luhlala lusisisongelo esizingisileyo. Abasebenzi abakude basenokuwela kubuchule bobunzululwazi bentlalonke kuba bebodwa yaye besenokungafikeleli ngokukhawuleza kwinkxaso ye-IT.

Olunye ucelomngeni lomntu kukungahambelani nemigaqo yokukhusela ugcino-lwazi. Xa abaqeshwa bebelana ngemfonomfono zevidiyo, beshiya amaxwebhu ebonakala kwikhamera, okanye beshicilela izinto ezichukumisileyo ekhaya, ubungozi bokuchanabeka ngempazamo kugcino-lwazi bunyuka. Ngaphezu koko, ukufinyezwa kwemida yobuqu neyingcali qhaza-ukusebenzisa i-imeyili yobuqu ukuze usebenze, ukugcina iifayile kwii-akhawunti zobuqu zamafu ./i-acan ikhokelela ekulahlekelweni yi-data okanye ekungadibaniseni nocwangciso lwenkcazelo.

Ukungalawuli abaqeshi abalinganiselweyo kunegalelo kwingozi yomntu. Ngaphandle kokujonga ngqo okanye iinkqubo ezinamandla zokuhlola, kunzima ukuqinisekisa ukuba kulandelwa iinkqubo zogcino-lwazi. Noko ke, ukuqwalasela okugqithisileyo kunokungqubana namalungelo omqeshwa obuqu phantsi kwe-GDPR, kudala ulungelelwano oluluqilima.

Imiqobo yolawulo kunye nomkhosi

Umsebenzi okwenye indawo wenza kube nzima ukuthobela i GDPR ngeendlela ezininzi. Ukudluliswa kogcino-lwazi ngaphesheya kwemida kuya kuxhaphaka kakhulu xa abaqeshwa besebenza besuka kumazwe awahlukeneyo. Kwanakumazwe ahlukeneyo, imfuneko yokubonakalisa ukuba ukhuseleko olufanelekileyo lukwindawo yayo yonke imisebenzi yokulungiselela iyalucelomngeni. Iintlangano kufuneka zigcine iingxelo zemisebenzi yokulungisa (ROPAS) ezibonisa ngokuchanekileyo amalungiselelo omsebenzi okwenye indawo."umsebenzi onokuthi uxhaphaze ukuba ubalo lwemisebenzi alugcinwangagcinwanga kude.

Ukuphumeza uhlomelo lweziphumo zokhuselo logcino-lwazi (DPIAS) kwizixhobo ezintsha zomsebenzi okanye iinkqubo ezikude zisoloko zingahoywa. Phantsi kwe-GDPR, njengoko i-DPI inyanzelekile xa uqhubekeko lubonakala lusemngciphekweni omkhulu ebantwini ngabanye. Iiplatfomu ezininzi ezikwenye indawo kunye ne-software yokuhlola i-software iwela kweli candelo. Ukungaphumeleli ukuphatha i-DEPI njengoko kunokukhokelela kuphatho-liso kunye nezolongo.

Omnye umqobo nguwo wokusingatha ukuphuka kogcino-lwazi. Umsebenzi okude ungalibazisela ukufunyaniswa konikezelo kunye nokuxelwa kwengxelo. Ukuba isixhobo somqeshwa siphosakele, isiganeko singangabonwa iintsuku ezininzi. i-GDPR ifuna isaziso kwi-DPC kwiiyure ezingama-72 zokwazi ukuqhekezwa komjelo, kwaye ukulibazisa kunokubangela ukuba kubekho izigwebo. Ulwabeko lwamaqela akude kukwenza kube nzima ukudibanisa isiphumo sesiphumo.

I-DPC yase-Ireland ibisebenza ngokunyanzelisa i-GDPR kumongo womsebenzi okude. Kukhokelelo oluneenkcukacha malunga nolindelo lokuthobela, jonga kwi webhsayithi ye-[FLT: 0] yoKhuselo logcino-lwazi lwe-Irissh yeKhomishini yeKhomishini[[FLT: 1]].

Iindlela Zokoyisa Ucelomngeni Lokhuseleko Logcino - lwazi

Ukulungisa ezi ngxaki kufuna indlela edityaniswe ngobuchule, imigaqo-nkqubo ecacileyo yentlangano, uqeqesho oluqhubekayo, kunye nokuphicothwa rhoqo. Iinkampani zase-Ireland kufuneka zilungise ezi ndlela zihambelane neprojekthi yazo yomngcipheko okhethekileyo kunye nemodeli yomsebenzi ekude.

Izilawuli Zobuchule

Ukuphumeza ukukhowuda okuqinileyo kusekelwe. Yonke idata kuthumo kufuneka ibhalwe ngokufihlakeleyo usebenzisa i TLS okanye imithetho elandelwayo elinganayo. Ukusetyenziswa komsebenzi ongundoqo ukuqinisekisa ukuba ingeniso yogcino-lwazi ifakwe ngokukhuselekileyo. Okuninzi okuqinisekisa (MFA) kufuneka kufuneke kuzo zonke ii akhawunti zomsebenzisi, ingakumbi kunikezelo lolawulo nakungena kude. I-MFA iyazicutha umngcipheko wokuthatha ityala kwanokuba amagama agqithisiweyo afakelwe kwi-password.

Ukhuseleko lwencam lubalulekile kwizixhobo ezikude. Iintlangano kufuneka zithumele ubhaqo lwesiphelo sesiphelo kunye nempendulo (EDR), zinyanzelise ukuba kufakwe isigqumo rhoqo, kwaye zisebenzise ulawulo lwezixhobo ezihambayo (MDM) ukunyanzela iinkqubo zokhuseleko kwi-OD okanye izixhobo ezinokuthenjwa kwinkampani. Ukuvulwa kombhalo opheleleyo kuzo zonke ii-laptop kunye nezixhobo ezihambayo zikhusela ugcino-lwazi ukuba isixhobo silahlekile okanye siyabiwa. Icandelo lenethwekhiyo lingasehlisa uphazamiso ukuba isixhobo esikude siye sarhoxiswa.

Iinkonzo zamafu akhuselekileyo kufuneka zibe sisithethe sokugcina ugcino logcino-lwazi kunye nentsebenziswano. Izixhobo ezifana ne Microsoft 365, Google Color, okanye iqonga elikhuselekileyo lefayile- eligcina iqonga elisoloko lakhiwe- ngokusemthethweni iziqinisekiso zokuthobela. Noko ke, imibutho kufuneka iqwalasele ezi zixhobo ngokuchanekileyo/ukunqanda ukulahleka kwe data (DLP) iinkqubo, ezimisela ifayile ukwabelana ngabasebenzisi abagunyazisiweyo, kwaye zisebenzisa iiplagi zobuphi bengxelo kumsebenzi wokujonga umsebenzi. Kwi-data, amanyathelo ongezekayo afana nolawulo lwamalungelo kunye nokuphawula amanzi angakunqanda unikezelo olusemthethweni.

Imigaqo-nkqubo yoQoqosho

Cacisa, imigaqo enyanzelisayo yisiseko sodweliso lwenkqubo yokhuseleko logcino-lwazi olukude. I-Aup Emkelekileyo I-Use Secrilicy (AUP) kufuneka ichaze ukuba zeziphi izixhobo nezicelo zobuqu ezivumelekileyo, ukuba zeziphi i-data ezinokugcinwa kwindawo ethile, kunye neenkqubo zokubika iziganeko zokhuseleko. Inkqubo kufuneka ichaze nokhuseleko lomzimba, ifune abasebenzi ukuba batshixe izikrini, izixhobo ezikhuselekileyo, kwaye baphephe ukusebenza kwizithuba zikawonke-wonke ezinogcino-lwazi olubonakalayo.

Zisa icebo lakho (BYOD) imithetho kufuneka icace ngokomthetho ngelungelo lombutho lokusula ugcino-lwazi lwenkampani kwisixhobo sokuphelisa okanye sokulahlekelwa. Abaqeshwa kufuneka baqonde ukuba imfihlo yabo ikhuselwe, kodwa ukhuseleko logcino-lwazi lwenkampani luthatha indawo yokuqala. Ngokufanayo, inkqubo yomsebenzi ekude kufuneka igunyazise ukusetyenziswa kokhuseleko lwe Wi-Fi (iindawo ezishushu zikawonke-wonke) kwaye ifuna ukuba iingingqi zasekhaya zikhuseleke ngegama eligqithisiweyo elinamandla kunye nohlaziyo oluqinileyo.

Ukwahlula-hlula ugcino-lwazi kunceda abasebenzi bafumane indlela yokuphatha iindidi ezahlukeneyo zolwazi. Ngokuchaza idata njengowonke-wonke, ngaphakathi, ukhuseleko, okanye ethintelweyo, abaqeshwa bangasebenzisa izikhuselo ezifanelekileyo. Umzekelo, ugcino-lwazi oluthintelweyo malungaze lugcinwe kwizixhobo zobuqu okanye kwizixhobo ezifihlakeleyo. Ukunyanzeliswa kolawulo lobugcisa obuzenzekelayo apho kunokwenzeka, njenge-DLP ethintelayo okanye elumkisa xa i-data enochuku ithunyelwa ngaphandle kombutho.

Iiplani zokuphendula ezikhawulezileyo kufuneka zihlaziywe ukubonakalisa izinto ezizizo. Oku kuquka ukuchazwa okucacileyo kweziqhagamshelanisi zokunika ingxelo (umz., ilayini eshushu okanye indlela ye-intanethi), iinkqubo zokuqokelela i-oyile, kunye neendlela zokuqokelela ezinokwenziwa kude. Imithambo yetheku ethe rhoqo ivavanya ukusebenza kwecebo kwaye yazise izithuba.

Uqeqesho nolwazi

Abaqeshwa baluluhlu lokuqala lokuzikhusela, kodwa bakwaye babuthathaka kakhulu xa bengaqeqeshwanga kakuhle. Ukuqhubeka nokuqeqesha abantu ngekhompyutha ukuba bayazi ukuba i-intanethi imele ikwazi ukudibana nemixholo efana nokuqatshelwa komntu oza kusebenza exesheni, i-password engcono, ukukhusela imikhwa ekude, kunye nemigaqo ekhethekileyo yokukhusela ugcino-lwazi. Uqeqesho kufuneka lunyanzeleke kubo bonke abasebenzi abakude kwaye luqaliswe ubuncinane ngonyaka, kunye neemodyuli ezongezelelekileyo xa kuvela izisongelo ezintsha.

Iimfaniso zokufaka imfaniso zinokuba yindlela ephumelelayo yokomeleza ulwazi. Izixhobo ezininzi zivumela imibutho ukuba ithumele ii-imeyili ezifanisiweyo kunye nomzila ozifanisayo onqakrazayo. Iziphumo zingasetyenziswa ukujolisa uqeqesho olongezelelekileyo kubantu ababuthathaka. Kubalulekile ukwenza impucuko apho abasebenzi baziva bekhululekile ukuxela iimpazamo ngaphandle koloyiko lokohlwaywa, njengokuba ukuxelwa ngokukhawuleza koqhawulo kuvumela ulungiso olukhawulezileyo.

Ngaphezu koqeqesho lokhuseleko oluqhelekileyo, abaqeshwa kufuneka baqonde iimbopheleleko zabo phantsi kwe-GDPR. Oku kuquka ukwamkela oko kubumnini bomntu, ukwazi indlela yokuphatha i-DSARs, nokuqonda imigaqo yokusetyenziswa kogcino-lwazi olusemthethweni. Uqeqesho olucacileyo kwabo baphatha iindidi ezikhethekileyo ze-data (umz., ulwazi lwempilo okanye lwemali) lukwacetyiswa.

Uqeqesho lulodwa alwanele; kufuneka luxhaswe yimpucuko ekhuthaza ukhuseleko. Iinkokeli zifanele zimisele isimilo esihle, zikhuthaze imibuzo, zize ziqaphele abasebenzi abanikela ingxelo yeengxelo. Amaphephandaba okhuseleko oluthe rhoqo, iincam, okanye iipoyinti (ezeeofisini zasekhaya okanye eziprintiweyo) zinokugcina ukhuseleko logcino-lwazi lusengqondweni.

Uphicotho-zincwadi

Ukuqinisekisa ukuba imigaqo-nkqubo yokhuseleko logcino-lwazi lwe-GDPR kunye nomthetho we-Ireland, imibutho kufuneka iqhube uphicotho-zincwadi rhoqo. Uphicotho-zincwadi lwangaphakathi kufuneka lukhangele ucwangciso lomsebenzi olukude, kuquka ukhuseleko lwezoqobo lwee-ofisi zasekhaya, ukumiselwa kwezixhobo, kunye nokunamathela kwiinkqubo zokuphatha ugcino-lwazi. Abacebisi bezolwazi okanye abacebisi bogcino-lwazi banganikezela ngembono ezimeleyo.

Ukugcina iirekhodi ezichanekileyo zomsebenzi woqhubekeko-phambili (ROPAs) asingokhetho. Kumsebenzi oku kuthetha ukubhala zonke izixhobo nemigangatho esetyenzisiweyo, iintlobo zedata esetyenziselweyo, isiseko esisemthethweni soqhubekeko, kunye nayiphi na isiphelo somda sogcino-lwazi. ROPAs kufuneka zihlaziywe xa isixhobo somsebenzi esitsha sokwenye indawo sisemgangathweni okanye umsebenzi wokulungelelanisa omtsha uqala.

Iinkqubo zokhuselo lokhuselo logcino-lwazi (DPIAS) kufuneka ziqhutyelwe naziphi na iinkqubo zomsebenzi ezitsha ezibandakanya ukujongwa okucwangcisiweyo kwabasebenzi (umz., ukwenziwa kwe-software yemveliso) okanye ukwenziwa kwemitha eninzi yogcino-lwazi olunovakalelo. Inkqubo ye-PIA inceda ukuchaza iingozi kwangoko kwaye iphumeze imilinganiso yokulinganisela. I-DPC inika iisikhokelo kunye nokhokelo lokuqhuba i-DPIA.

Ekugqibeleni, imibutho kufuneka imisele iGosa loKhuselo logcino-lwazi (DPO) ukuba kufuneka linikwe liGatya 37 le-GDPR (amagunya kawonke-wonke, ukujongwa kwendlela elungeleleneyo, okanye ukulungiselelwa kwesantya esikhulu kwiindidi ezithile). Nokuba akunyanzelekanga, ukuba ne-DPO okanye iqhawe lokhuseleko logcino-lwazi linganceda ukuquququzelela imigudu yokhuseleko logcino-lwazi olukude kwaye lisebenze njengendawo yokunxibelelana ne-DPC.

Ikamva I-open yesixhobo sokhuseleko logcino-lwazi kumsebenzi owenziwe kude e-Ireland

Umsebenzi okude asingowokwexeshana; iinkampani ezininzi zase-Ireland zithathe iimodeli eziza kuqhubeka. Njengokuba ubugcisa buzitshintsha, ngokufanayo nocelomngeni nezisombululo zokhuseleko logcino-lwazi. Ubuchule bokwenza umatshini nobuchule sele busetyenziselwa ukufumanisa ii-anomalie kwaye zisabela kwizisongelo zexesha lokwenene. Noko ke, i-Al ngokwayo inyusa imibuzo entsha yokhuseleko logcino-lwazi oluzinzileyo ngokubhekiselele ekwenzeni izigqibo nokunganyaniseki kwe-atom.

I-Irish DPC kulindeleke ukuba iqhubeke inyanzelisa ulwamkelo lobundlobongela, ijolise ingqalelo kwimiba yomsebenzi ekude. Izigqibo zakutshanje zibalaselise ukubaluleka kobuchule bokudlulisela ugcino-lwazi olufanelekileyo (umz., umgangatho osezantsi ka-Claus) kunye nemfuneko yokuphendula ngokungalindelekanga. Amashishini kufuneka ajonge ukhokelo lwe-DPCC kwaye acinge ukubandakanye namaqela oshishino anjenge-Irish Compograph Society ukuhlaziya.

Ukwakhiwa kwe Zero Trust kuyafumaneka. Phantsi kwemodeli yeTroup Trust, akukho sixhobo okanye umsebenzisi othenjiweyo yindawo engagqibekanga. Isicelo ngasinye sokufikelela siqinisekisiwe, sigunyaziwe, kwaye sibhalwe ngokufihlakeleyo. Le ndlela ilungelelanisa kakuhle nomsebenzi okwenye indawo kuba isusa ingqiqo yothungelwano olukhethekileyo lwangaphakathi. Ukufihlwa kwe-Troot Trust kufuna utyalo kulawulo, ukwenziwa kwemikrozo, kunye nokujongwa okuqhubekayo, kodwa kunganciphisa isiphumo songqubano.

Uphuhliso lolawulo oluselundini luquka ulungiso olucetywayo lwe-ePrivgacy Regation, oluza kutshintsha imithetho kuthungelwano lwe-elektroniki, kunye nohlaziyo olunokwenzeka kwi-GDPR ngokwayo. Umthetho wogcino-lwazi lwe-Programence kunye noMthetho wogcino-lwazi unganentsingiselo yokuba ugcino-lwazi lwabini lungasetyenziswa njani. Imibutho yase-Ireland kufuneka ihlale izindwe ngezixhobo ezifana ne- i-Eupanean Union ye-CYbersecurity (ISA).

Ekuqukumbeleni, ukukhusela ugcino-lwazi kwindawo esemaphandleni yomsebenzi lucelomngeni olufuna ubuchule, umgudu oqhubekayo. Ngokuqonda indlela yolawulo, ukuchaza ubuchule kunye nobuchule babantu, nokuhlala bevumelana neenguqu zexesha elizayo, iinkampani zase-Ireland zingakhusela ugcino-lwazi lwazo kunye nodumo lwazo. Ukhuseleko oluqinileyo logcino-lwazi aluyombopheleleko esemthethweni kuphela kodwa luluncedo kuqoqosho oluthe lwandiswayo lwezobugcisa.