Converged Security Framework - Data Protection and Privacy Procedure

Data Protection and Privacy Procedure. Board-approved procedure, v1.0. Not a peer-reviewed Journal article. This procedure tells an adopting organisation exactly who does what, when and how to implement GCSB-ST-CSF-DPP-001. It converts the standard's data protection requirements (clauses 6.1 to 6.10) into repeatable, auditable steps. It does not change, relax or extend any requirement of the standard; where this procedure and the standard differ, the standard prevails. Binding law always takes priority over this procedure. Issued by Global Converged Security Board. The adopting organisation is responsible for implementation; publication does not itself confer accreditation or a credential.