{"id":595,"date":"2018-09-13T17:44:41","date_gmt":"2018-09-13T17:44:41","guid":{"rendered":"http:\/\/iso.thatwebdev1.co.uk\/?page_id=595"},"modified":"2019-11-14T14:46:39","modified_gmt":"2019-11-14T14:46:39","slug":"bs-10012","status":"publish","type":"page","link":"https:\/\/www.episodeltd.com\/bs-10012\/","title":{"rendered":"BS 10012"},"content":{"rendered":"\n\t

BS 10012<\/h1>\n\t

As legal requirements such as the European Data Protection Regulation (EU GDPR) are developed and enforced, businesses need to demonstrate that they take managing privacy seriously. BS 10012 has been produced for exactly this reason.<\/h4>\n\t

How do I get BS 10012?<\/h2>\n\t

Don\u2019t be put off by thinking it is too complex a thing to do. We aren\u2019t saying it\u2019s simple, but with us doing the bulk of the work for you, including managing the whole process, it is relatively straightforward.<\/p>\n

There are 6 stages to becoming and staying certified to BS 10012:<\/p>\n

    \n
  1. Establish a system that complies with the standard<\/li>\n
  2. Carry out a Data Protection Impact Assessment [DPIA] to understand what data you handle<\/li>\n
  3. Make everyone aware of the system and any changes in ways of working that have come about<\/li>\n
  4. Operate the system to
    \na. Make sure it works efficiently
    \nb. Build evidence of compliance with the requirements of the standard
    \nc. Get staff familiar with it<\/li>\n
  5. Appoint a \u201ccertification body\u201d to independently assess whether you comply with the standard. We recommend you choose a UKAS accredited body (see below)<\/li>\n
  6. Keep using the system once it has been certified (to keep the certificate)<\/li>\n<\/ol>\n

    There is more detailed information below about the various stages you need to go through.<\/p>\n\t\t\t\t\"\"\n\t

    Your BS 10012 certification journey<\/h2>\n\t\t\t\t\"Group\n\t

    Getting Started<\/h3>\n\t
      \n
    1. Provide a comprehensive briefing of what the standard and GDPR asks you to do in simple to understand terms<\/li>\n
    2. Begin to understand in detail how you operate<\/li>\n
    3. Set a timetable and stick to it<\/li>\n
    4. Decide what you want covered by the certificate \u2013 which sites, products and services.<\/li>\n
    5. Put the right resources in place<\/li>\n
    6. Collect all existing documentation<\/li>\n
    7. Establish a dedicated client portal on our collaboration and document sharing platform<\/li>\n
    8. Begin identifying and recording all your information assets<\/li>\n
    9. Begin creating an Information security asset register<\/li>\n
    10. Begin understanding how well you comply or otherwise to GDPR<\/li>\n<\/ol>\n\t\t\t\t\"Group\n\t

      Implementing<\/h3>\n\t
        \n
      1. Establish a detailed project plan in our online project management platform (and stick to it)<\/li>\n
      2. Undertake a technical audit of your system (with our cyber security\/info sec partner)<\/li>\n
      3. Carry out a Data Protection Impact Assessment (good practice and mandatory for GDPR)<\/li>\n
      4. Decide with you what you need operationally<\/em><\/strong><\/li>\n
      5. Map out your business processes<\/li>\n
      6. Complete a gap analysis between what the standard requires and what you have\/do already<\/li>\n
      7. Implement the system<\/li>\n
      8. Complete required documentation<\/li>\n
      9. Submit the system to Episode Head Office for final QC checks<\/li>\n
      10. We return it to you for your final approval<\/li>\n
      11. Brief staff<\/li>\n
      12. Separate consultant Internally audits the system<\/li>\n
      13. Carry out a management review<\/li>\n<\/ol>\n\t\t\t\t\"Group\n\t

        Certification<\/h3>\n\t
          \n
        1. Work with you to select and appoint a UKAS accredited certification body.<\/li>\n
        2. Be onsite throughout the certification process<\/li>\n
        3. Address any issues that arise during the audit<\/li>\n
        4. Brief you on post-certification activity
          \na. 3 year cycle of annual surveillance audits and
          \nb. what you need to do throughout the year to maintain the system<\/li>\n
        5. Agree where the finished, certified system should be housed<\/li>\n<\/ol>\n

          <\/h4>\n

          Episode guarantees certification<\/strong><\/h4>\n\t

          FAQ\u2019s<\/h3>\n\t