You are currently viewing the ‘Clients’ Category

IT Governance Legal Framework

Wednesday, September 1st, 2010

Are you looking for an IT Governance Legal Framework or an IT framework that will help your organisation: comply with all applicable IT laws and consider all applicable IT rules, codes or standards; and address IT legal risks. This legal framework will help you to apply the legal principles of IT governance in ...

Privacy Training

Sunday, August 8th, 2010

There are several reasons by training is important: Firstly, the Protection of Personal Information Bill ("POPI") requires that "appropriate, reasonable" measures be taken to protect information from loss, damage or unlawful access (as does the Payment Card Industry Data Security Standard and ISO 27001). This implicitly requires companies to set up training programs to help employees understand ...

Privacy FAQ

Sunday, August 8th, 2010

What impact will the new privacy bill have on my business? the way you manage information: in terms of the the Protection of Personal Information Bill ("POPI"), you will now have to classify what information you hold constitutes "personal information" (PI). King 3 also requires  companies to identify what "records" and ...

IT Goods and Services Audit

Thursday, August 5th, 2010

This audit deals with the acquisition, management and disposal of IT goods and services. Principle 5.4 of King III states that "The board should monitor and evaluate significant IT investments and expenditure." IT investment and expenditure includes the acquisition, management and disposal of IT goods or services. Types of IT goods or services, ...

Access to Information Audit

Thursday, August 5th, 2010

You must comply with the Promotion of Access to Information Act 2 of 2000 (PAIA), because it applies to all organisations. PAIA as a lot of practical implications. Click here to understand what they are. In terms of PAIA all private bodies (entities mentioned above as defined in PAIA) and public bodies ...

Reasons for conducting an IT Governance Legal Audit

Wednesday, August 4th, 2010

King III applies applies to all companies regardless of whether in the public, private sectors or non-profit sectors. King III requires that "companies must comply with all applicable laws". It specifically mentions "applicable IT laws". "Companies must also consider adherence to applicable IT rules, codes and standards".[private] King III also requires companies ...

When a ‘contract’ is not a contract

Thursday, April 29th, 2010

We often get asked to review a document which looks like a contract and contains legalistic words, but, on closer analysis, is not one. What is a contract? A contract is an agreement between two or more people or organisations ("parties" to the contract), which creates rights and obligations for those parties. ...

Be careful when formulating your Privacy Policy

Tuesday, April 13th, 2010

Many people think that complying with the Protection of Personal Information Bill (the "PPI Bill") is simply a case of preparing a privacy policy. In doing so, there appears to be a tendency to simply "cut and paste" from an existing privacy policy online. This is possibly due to the fact that ...

Privacy Solutions

Friday, March 26th, 2010

We can help you identify and implement various privacy solutions. They include the following: Formulate, draft or revise your privacy policy Formulate, draft or revise your privacy procedures (the policy provides high-level statements of your positions on particular issues whereas procedures bring those positions down to earth by laying out specific actions ...

Don’t ignore the legal considerations when creating a web site

Wednesday, March 17th, 2010

Many people do not take into account the legal considerations when creating a web site.  There are many things to take into account and often the legal aspects get neglected.  In some people's view the legal considerations are not important or are too complex.  Some believe that traditional legal concepts ...