The General Data Protection Regulation is the latest, and one of the most stringent, regulations regarding Data Protection to be passed into law by the European Union. Fundamentally, it aims to protect the Rights and Freedoms of all the individuals included under its terms; ultimately the privacy and security of all our personal data. This requirement for protection extends globally, to all organisations, public and private, wherever personal data is held, processed, or transmitted concerning any EU citizen. Cyber Security is at the core of data protection and there is a heavy emphasis on the application of encryption and state of the art technology within the articles of the GDPR. This is considered to be a primary method in achieving compliance with the law. Understanding the overall use and scope of Cyber Security principles and tools allows for greater efficiency and more cost effective management of Information systems.GDPR and Cyber Security for Business Information Systems is designed to present specific and practical information on the key areas of compliance to the GDPR relevant to Business Information Systems in a global context.

Preface Acknowledgements List of Figures List of Abbreviations PART ONE: INTRODUCTION 1 The GDPR Fundamentals 2 Organisations, Institutions, and Roles 3 Information Systems Management and the GDPR 4 Cyber Security and the GDPR PART TWO: PREPARATORY STEPS 5 Data Protection by Design and Default 6 Protection Policies and Privacy Notices 7 DPO, DPIA, and DSAR PART THREE: IMPLEMENTATION 8 International Standards; ISO's 9 Security Incident Management 10 Valuing Security Index About the Authors