GDPR and Security: Appropriate Technical Measures
What GDPR means by appropriate technical and organisational measures in practice, with examples and the Irish DPC as regulator. Not legal advice.
Blog category
Practical security for applications and data: authentication, encryption, audits and monitoring.
What GDPR means by appropriate technical and organisational measures in practice, with examples and the Irish DPC as regulator. Not legal advice.
What a secure software development lifecycle (SDLC) is, how to add security to each phase from requirements to maintenance, and where to start.
The OWASP Top 10 web application risks explained in plain English, what each means for your business, and what to ask your developers or suppliers.
How ransomware works, the controls that prevent most attacks, and a step-by-step response plan for small and medium businesses.
How to recognise phishing emails, texts and calls, what to do if you clicked, and how businesses can reduce the risk with training and technical controls.
What a business security audit covers, how it differs from a penetration test, what you need to prepare, and how to act on the findings afterwards.
How encryption works and the difference between encryption at rest and in transit, with what to enable, how keys fit in, and common mistakes to avoid.
Modern password policy: favour length over complexity, drop forced rotation, use a password manager and MFA, and plan for passkeys. A practical template.
What multi-factor authentication is, which methods to choose, and a step-by-step plan for rolling out MFA across a small or medium business without chaos.
A practical cybersecurity checklist for small businesses in Ireland: accounts, devices, backups, updates, people and incident planning, in priority order.
Let’s build it
Tell us what you want to build, fix or secure. We reply with a clear next step.