Data Privacy Protection Measures

DPO / COP, policies and procedures, records of processing activities, management of human resources, contracts with PIPs

Organizational Security Measures

Email, access control, acceptance use policy, BYOD, duty of confidentiality; storage, retention, disposal

Information Security Policies

Access to personal info, security clearance R.A 10173 section 23, training

Management of HR

Access to data center or data room; design of office space and workstations; transfer, removal, disposal, and re-use of electronic media; personnel; natural disasters

Physical Security Measures

Encryption, password, firewalls, audit logs, back-up policies, regular schedule of software updates, test the efficiency of the software

Technical Security Measures