Tag: POPIA

Ross Saunders

Professional Speaker / Data Crusader

• South Africa
• Ross specialises in data protection and information security, raising awareness and educating staff on the human aspect to what can, and does, go wrong in data protection. As an international speaker, facilitator, and consultant, Ross demystifies technical, security, and legal topics to make them accessible at all levels of the organisation. He started as a paperboy in 1999, perhaps subconsciously influenced by the video game of the same title… His skill improved with practice (both at video games and real life), and his love for games saw him move into the field of IT. He then moved through a range of technical positions, with a brief dalliance in software development. Since then, Ross has spent numerous years in strategic management for a multitude of multinational software companies. Ross has a particular passion for data privacy, having been a victim of identity theft and seeing first hand the impact of data breaches on both individuals and organisations. He aims to help organisations manage their data effectively, avoiding the pitfalls they may not be aware of. His “happy place” is the intersection between business, technology, and people. He has a passion for helping companies get the best out of their business process and technology, all while improving the way that teams of people interact with these systems and each other. Ross loves simplifying the mysteries of technology and enabling people across the business spectrum, be it via speaking, training, or consulting. Ross holds a Masters Degree in the Management of Technology and Innovation, is a Certified Information Privacy Professional (CIPP/E) and is an EC Council Certified Ethical Hacker (CEH). He is a past National President of the Professional Speakers Association of Southern Africa (PSASA), and is a Professional Member of the Canadian Association of Professional Speakers (CAPS) and the International Association of Privacy Professionals (IAPP). <strong>Your Outsourced CISO</strong> Data Protection is not the IT department’s problem, it’s company-wide. As such, you need to ensure that your teams, from the ground up, are trained and aware of their responsibility when it comes to the data in their command. Ross and his network of professionals can help you comply with Data Protection Legislation, by offering training from basic awareness through to the specifics of legislation for your Information Officers, and by offering specialised bolt-on consulting for your company. Help Us Comply Data Protection and Information Security advisory and consulting Strengthen Our Strategy Outsourced Chief Information Officer to SMMEs and entrepreneurs <strong>Corporate Speaking:</strong> From keynote addresses to training and awareness campaigns Data compliance that works for you. Ross G Saunders Consulting helps organisations comply with Data Protection regulation in a way that works for them. Be it speaking at events, education of teams, short programmes for baseline compliance, or long-term ongoing compliance. <strong>Specialities include:</strong> Data Privacy and Compliance (GDPR, POPIA) Cloud, InfoSec and Privacy Strategy Hosting and Advanced Technical Consultation Technology Strategy <strong>Privacy-in-a-Box Solution</strong> The Problem Getting a compliance programme off the ground can be a daunting task. Executives and staff are already spread thin with day-to-day work, starting compliance efforts internally means that additional time must be made – time away from revenue generating activities. If you still need to research what needs to be done and how to do it, it just becomes unreasonable! <strong>Data Privacy and InfoSec Consulting</strong> The Problem Have you said the following?   <ul> <li>“GDPR doesn’t apply to us, we’re South African / Canadian / Australian (and so forth).”</li> <li>“I know where all my information is.”</li> <li>“We don’t need additional safeguards.”</li> <li>“We have a firewall, we’re fine.”</li> <li>“That’s IT’s problem!”</li> </ul> Data privacy is a company wide objective, or at least it should be. Most executives, however, don’t have enough time in the day to incorporate data privacy and information security into their daily routines, so it gets passed off to IT. Unfortunately, neither process resides solely in the IT department, and doing this is a dangerous game.