ISO27001 recommended for meeting Singapore’s PDPA requirements

IT Governance recommends that Singaporean organisations implement ISO27001 for supporting adherence to the PDPA.

SINGAPORE, SINGAPORE, SINGAPORE, June 30, 2014 /EINPresswire.com/ -- On 2 July 2014 the Personal Data Protection Act (PDPA) rules will come into force which will govern the collection, use, disclosure and care of personal data throughout Singapore. Asia-Pacific’s largest provider of information and data security products and services, IT Governance, recommends that Singaporean organisations implement ISO27001 for supporting adherence to the PDPA.

ISO27001 is the international Standard for specifying information security best practice. Due to its holistic focus on people, processes and technology, this Standard ensures appropriate technical and organisational measures are in place to reduce the risk of data loss. Implementing ISO27001 will ensure data is managed securely and in line with the data protection rules, which have been established by the Personal Data Protection Commissioner (PDPC) to govern the Act.

An internationally accredited ISO 27001 certificate tells existing and potential customers that your organisation has defined and put in place effective information security processes, helping to create a trusting relationship. Certification also ensures that an organisation keeps its information security up to scratch, and therefore it continues to ensure its ability to operate. ISO27001 certification in Singapore has increased by over 800 % from 2006 when the standard was conceptualised.

Organisations throughout Singapore (excluding public agencies and some other entities) will need to take steps towards complying with the new rules in order to protect the individual. Failure to do so could mean a financial penalty of up to $1 million. Further, an organisation that breaches any of its duties under the Do Not Call (DNC) provisions in the Act commits an offence and is liable to a fine of up to $10,000 for each offence.

IT Governance offers further guidance relevant to adhering to the PDPA through ISO27001 with their useful green paper, ‘Information Security and ISO27001’. This briefing paper is free to download and acts as a basis for building one’s knowledge around the subject: http://www.itgovernance.asia/t-green-papers.aspx

Melanie Watson
IT Governance
448450701750
email us here