INFORMATION
PRIVACYNavigate regulations and drive your own
privacy controls sustainably.

INFORMATION PRIVACY
Privacy compliance requirements are constantly evolving.
Right at the forefront are local and international privacy regulations, including South Africa's POPIA (Protection of Personal Information Act), Europe's GDPR (General Data Protection Regulation), the UK's Data Protection Act, and others. In the recent past, many other jurisdictions within Africa have also introduced similar regulations, such as Mauritius and, most recently, Botswana.
But how do these regulations apply to your business? Sure, you can consult a law firm to help you navigate the legislative minefield, but that will only get you so far. The Mobius Privacy team can do it in a way that makes strategic sense for you, building the necessary controls into your enterprise and business processes with a focus on IT risk and related processes.
Our skill set goes far beyond gap assessments and single jurisdictional understanding and is supported by experience in information security and IT governance. We Interpret all regulations and legislation from a practical point of view. We assess your situation, map accordingly, and then assist in implementing controls simply while taking your growth opportunities into account. Our approach is underpinned by our ability to transfer skill to your internal teams to enable you to drive your own privacy controls sustainability into the future.
Let us assist you in developing or updating key Privacy governance artefacts such as your PAIA Manual, Privacy Notices and Policies, breach Notification templates, Data Subject Access Rights SOPs, and other supporting artefacts and regulatory reporting templates. We can also assist from your team’s capacity perspective with the performance of ongoing Privacy operational activities such as Privacy Impact Assessments or the maintenance of your PI Inventories or Records of Processing Activities (ROPAs).
THE MOBIUS ADVANTAGE
APPROACH
Practical and simple methodology for easy adoption
Contextualise Privacy compliance requirements for your business and act accordingly
Fast-track solutions through legislative understanding
Proactive strategy to facilitate business growth
Hands-on assistance with internal adoption of the processes
RESULTS
Pragmatic compliance with applicable Privacy Regulation and related legislation
Fully contextualised and sustainable solutions
Ideal positioning for growth opportunities
Simplified privacy management processes and self-governance
EXPERTISE
Multijurisdictional knowledge and experience
Legal interpretation and control implementation
Privacy management and implementation
Information security and governance
Gap assessment approach
Skills transfer
Certification in European Privacy Law (CIPP/E)
Certification in Privacy Management (CIPM)
Certification in Privacy Technology (CIPT)
Certified Data Privacy Solutions Engineer (CDPSE)
Information Security and governance certifications

OUTSOURCED SERVICES OFFERING
The dilemma that most organisations are faced with is a shortage of Information Security and Information Privacy resources, and companies often lack the skills to ensure the success of their Information Security and Information Privacy Programmes.
An Outsourced Information Privacy Manager (OIPM) will assist and provide guidance on how to manage the organisation’s Information Privacy Programme, incorporating governance, users and structures, technological solutions, monitoring and continuous compliance of Information Privacy. They will also keep you abreast and inform you of any data protection regulatory changes, regulatory body punitive actions, and current cases.

POPIA COMPLIANCE CHECKLIST
Most organisations have developed an Information Privacy Program and have progressed in their Privacy journeys. We have developed a high-level POPIA Checklist to reflect some of the key activities that will take you to the next maturity level and ensure you stay on track with your Privacy compliance goals!

INFORMATION PRIVACY MATURITY ASSESSMENTS
In light of the increasing and evolving local and International Privacy requirements, organisations are changing the way they view Information Security and Privacy as an Enterprise-Wide priority and objective, and not only as a means for compliance.
We assist organisations not only to accelerate the implementation of Information Privacy whilst building a unique and mature vision to put them at the forefront of consumer trust and compliance.
Our methodology focuses on Information Protection as a business operation, specifically the Information Security aspects supporting Privacy. Our approach is in line with both the NIST Privacy Framework and ISO 27701 whilst considering each organisation’s own Privacy vision and risk exposure uniquely.

INFORMATION PRIVACY TRAINING
The Mobius Approach to training and upskilling your employees is highly practical and we cover the most relevant and up to date topics.
The courses provide an end-to-end life cycle, ensuring that Information Privacy becomes hardwired into your organisation.
Training is interactive and engaging, reusable and results-driven.
Our Information Privacy experts are available to train staff members, leaders, and executives using our internally developed approach, either in person or remotely, as best fits your company culture.

ARTICLES
Mobius Consulting will be presenting ISACA Exam Preparation Workshops for CISA (by Terence Fogarty) and CRISC (by Andre Viviers) 30…
Congratulations to our MD, Patrick Ryan, for winning the 2017 ISACA South Africa Innovation Award. Mobius, under Patrick Ryan’s direction,…
Mobius is offering “live hack” demo’s (approximately 30 mins ) to all our valued clients to raise Cyber Security awareness during the…