Description

The Establishing a POPIA Compliance Framework Course will inform and guide attendees to develop, implement, monitor, and maintain a POPIA compliance framework in accordance with the specific requirements of the Information Regulator. In this course, you’ll learn about how to use the framework to promote effective, efficient, and acceptable data protection practices regardless of the size of the organisation, and provide a basis for objective evaluation of compliance with the conditions for the lawful processing of personal information.

This course includes: 

• Develop
• Define the scope and boundaries of the POPIA compliance framework
• Determine measures of data protection effectiveness
• Assign roles and responsibilities for the tasks identified in the compliance framework
• Define data protection policies according to business characteristics, legal, technology assets, risks, etc.
• Define a personal information impact assessment approach
• Identify, analyse and evaluate the data protection risks to data subjects (PIIA)
• Identify and evaluate options for treating the risks to data subject
• Select technical and organisational measures to protect personal information
• Obtain responsible party approval of residual risks to data subjects
• Obtain management authorisation to implement and monitor the compliance framework
• Implement
• Pre-implementation procedures – formulate a risk treatment plan that includes the appropriate management action, resources, responsibilities and priorities
• Implement the risk treatment plan to achieve the identified data protection objective of the identified data subjects
• Implement the selected technical and organisational measures
• Manage operation of the POPIA compliance framework
• Manage resources, including purchased materials and sub-contracted personnel
• Implement measures to detect data protection events.
• Monitor
• Execute monitoring and reviewing procedures for the processing of personal information
• Promptly identify attempted and successful interferences, breaches and incidents
• Measure the effectiveness of the safeguards implemented
• Review data protection risk assessments at planned intervals
• Conduct internal data protection audits
• Undertake management reviews of data protection responsibilities
• Update data protection plans
• Record actions and events.
• Maintain
• Measure, analyse, and improve the effectiveness (performance) of key data protection practices
• Resolve data protection problems – ensure the availability of resources, methods, and measures
• Continuously improve the protection of personal information – implement the actions necessary

Course Details

This is a 2-day course conducted in a virtual classroom.

The course ends with a short exam of ten questions. This is necessary to confirm knowledge transfer to the attendee.

Once your registration is confirmed, you will receive a link to access the Virtual Classroom Platform using the credentials provided to you.

Cancellation/Refund Policy

All purchases of online learning courses are final. Access to the online learning courses and materials is immediate upon purchasing; therefore no refunds or exchanges will be provided. Prices are subject to change without notice.