企业合规、法务、信息安全部门负责人，拥有合规、法务、信息安全职能的纪检监察部门负责人，从事合规、法务、信息安全实务操作的部门主管及一般员工

Fee费用： 3980 元 以上费用包括会议资料/茶歇/午餐

课程背景 Course Background:

2018年5月25日，GDPR（欧盟通用数据保护条例，General Data Protection Regulation）正式生效，开启了一个新的数据合规时代。1000万到2000万欧元，或企业全球年营业额2%到4%的罚款让所有受其管辖的企业都必须将数据保护合规提升到生存高度予以应对。面对新法，企业的应对仍然显得十分不足。2017年，英国政府在“四大”协助下发布了富时350指数网络治理健康检查报告，报告显示近六成的受访者表示对GDPR不太或并不了解，同时仅有8%的受访者表示已经做了充分的准备，接近75%的人表示仅做了部分准备。那么从国内外来看，未来数据安全法规趋势如何？网络安全问题的本质是什么？企业如何规避不合规数据的风险？怎样提供可切实实施的风险整改计划？

课程收益 Course Benefits:

了解GDPR、中国网络安全法及其他相关法律法规要点

Understand the main points of GDPR, the Cybersecurity Law of the People’s Republic of China and other relevant laws and regulations

了解GDPR及其他相关法律对于企业所处行业的影响程度

Understand the impact of GDPR and other relevant laws and regulations on the industry

了解企业各个层级部门应如何应对外界监管规定

Understand how the departments of enterprises at each level should cope with the regulations

掌握提升企业数据合规、网络安全的方式方法

Learn the ways and means to improve enterprise data compliance and cybersecurity

了解危机发生时应如何进行处理和应对的方法

Understand how to deal with crises

学习先进风险评估框架，并能运用到实际工作中

Learn advanced risk assessment frameworks and apply them to practical work

谁该来参加 Who Should Attend:

企业合规、法务、信息安全部门负责人，拥有合规、法务、信息安全职能的纪检监察部门负责人，从事合规、法务、信息安全实务操作的部门主管及一般员工，其他对数据合规、网络安全感兴趣的有识之士，以及想提高企业综合管理能力的优秀积极人士。

Persons in charge of corporate compliance, legal affairs and information security departments; persons in charge of discipline inspection and supervision departments with the functions related to compliance, legal affairs and information security; department heads and general employees engaged in compliance, legal affairs and information security practices; far-sighted persons interested in data compliance and cybersecurity; and activists who want to improve the comprehensive management capabilities of their enterprises.

课程大纲 Course Outline:

GDPR及相关法律法规

GDPR and relevant laws and regulations

GDPR概述

GDPR overview

中国网络安全法概述

Overview of the Cybersecurity Law of the People’s Republic of China

数据隐私保护 Data privacy protection

网络安全等级保护 Classified protection of cybersecurity

信息跨境传输 Cross-border information transmission

网络安全监控与应急响应 Cybersecurity monitoring and emergency response

全球数据保护法律法规环境

Global data protection laws and regulations

数据合规、网络安全的趋势

Data compliance and cybersecurity trends

数据安全事件及处罚案件

Data security incidents and punishment cases

企业应对现状

Enterprises’ response

从国内外大背景看趋势

Trends from the perspective of domestic and international background

企业应对策略

Enterprises’ countermeasures

管理层应对策略

Countermeasures at the management level

业务层应对策略

Countermeasures at the business level

技术层应对策略

Countermeasures at the technology level

识别敏感信息

Identification of sensitive information

数据生命周期管理

Data lifecycle management

数据信息的收集与使用

Collection and use of data information

数据信息的加工、传输与共享

Processing, transmission and sharing of data information

数据信息的保存与销毁

Preservation and destruction of data information

识别个人数据、重要数据、商业秘密数据

Identification of personal data, important data and trade secrets

建立风险评估矩阵

Establishment of risk assessment matrix

怎样确定数据安全评估标准

How to establish data security assessment standards

定量化衡量风险等级及对企业的影响

Quantitatively measure risk levels and risk impact on enterprises

怎样提供可切实实施的风险整改计划

How to develop a practical and feasible risk control plan

建立数据治理框架

Establishment of data governance framework

数据治理的全过程

Whole process of data governance

应对型数据治理及主动型数据治理

Passive and active data governance

数据管理能力成熟度模型

Data management capability maturity model

搭建数据合规体系

Establishment of data compliance system

进行GDPR及网络安全法适用性评估

Evaluate the applicability of GDPR and cybersecurity laws

划分数据类型及区别制定合规策略

Classify data and develop different compliance strategies based on the classification

更新与完善隐私政策

Update and improve privacy policies

建立风险评估、记录与响应机制

Establish risk assessment, recording and response mechanisms

搭建网络安全体系

Establishment of cybersecurity system

网络安全威胁类型

Types of cybersecurity threats

常见的安全服务机制

Common security service mechanisms

构建网络安全防护体系政策建议

Policies and suggestions for building a cybersecurity protection system

关于讲师 About the Speaker:

陈先生任职于安永法证及诚信合规服务部门，担任法证技术合伙人。他专注于持续合规监控和管理体系、贸易合规、数据合规、信息和隐私保护、反垄断、风险预测分析、以及电子取证。以上领域均需要对结构化或非结构化格式的财务、运营和交易数据进行大量的深入分析。陈炽带领的团队利用数据可视化、统计建模和文本挖掘等先进的分析技术，帮助客户及时、高效地识别高风险交易或者行为，并积极提供应对办法。陈炽先后在美国、澳大利亚以及中国就职，拥有超过16年的综合咨询和审计工作经验，为众多财富500强企业和跨国公司提供服务，涉及生命科学、制造业、消费品、工业产品、建筑、科技、金融服务、能源和电讯等多个不同行业。

Chen, a forensic technology partner of EY Forensic & Integrity Services, specializes in proactive compliance monitoring and management systems, trade compliance, data compliance, information and privacy protection, antitrust analytics, predictive risk analytics and eDiscovery, all of which require in-depth analysis of large and disparate sets of structured and non-structured financial, operational and transactional data. He leads his team to help clients identify high-risk transactions or behaviors in a timely, efficient and effective manner by leveraging advanced data analytics techniques including but not limited to data visualization, statistical modeling and text mining. He has more than 16 years of combined advisory and audit experience in the US, Australia and China. Besides, he has served many Fortune 500 and multinational companies in a variety of industry sectors including life sciences, manufacturing, consumer goods, industrial products, construction, technology, financial services, energy and telecommunications.