In this video, we're going to talk about IT Compliance, that is the legal compliance you
might have to do for Australian legislation or even association or industry legislation.
Good day Dan, how are you?
Good, thanks Tim.
Okay, this is exciting.
Hold yourself down if you possibly can.
Let's talk about legal compliance.
Firstly, what is IT Legal Compliance?
So, legal compliance for businesses with regard to their IT is different for every business.
For example, if you're a bank you've got different compliance regulations to what a building
company would have, for example.
So, each business needs to look at what compliance that they have and how does it relate to them.
Okay.
So there's some Australia-wide IT legislation.
What are the some of the things that sort of affect everybody that most businesses need
to be aware of?
So, the legislation that's non-industry specific, would be related to most recently
the Notifiable Data Breach Laws, they affect all Australian businesses,
not only that if your business
is operating inside Europe, or the UK, in the US it also affects you as well.
So, Notifiable Data Breach Laws came into effect in February 2018 and they basically
say that if your business data is breached, if it's compromised in any way, whether that's
a staff member walking out at the end of the day, stealing your data on USB stick or whether
it's a hacker from Russia connecting in via the internet and stealing your data that way.
Doesn't matter how your data was hacked, but you have to comply with the law by reporting
it to the government and also advising all of your clients that you've been hacked.
So, that's now mandated for every Australian business that if they are hacked they have
to go through that process.
Does not sound like a fun day.
Emailing everybody that you just been, that your stuff just been nicked.
Alright so, that's some Australia-wide stuff.
Can you talk to me about some examples of IT Compliance requirements that are industry
specifics, maybe give us an example if you could.
To give you an example of a fairly small credit union that we worked with a few years ago.
So, they had their servers in their one data centre in their office.
And they weren't backing up them up to a remote location which was a breach of the IT Compliance
that was regulating their industry.
So, because they didn't have these off-site back-ups, they needed us to come in and be
able to create off-site back-ups and ensure that their data was replicated into another
area in the event that something happened to their main data centre, that it could be
brought up and restored in a second data centre.
So, we're able to do that, we're able to then test that plan and make sure that we could
verify if the data was affected in the primary area
that we could bring it up in the secondary zone.
Alright, good.
Are there any other particular industries that have compliance or legislation issues
that, you know, just that they should be more aware of, like Banking's obviously one.
Any others that come up over your time in IT?
Well, I'd say most of the industries have got their own industry-specific regulations
when it comes to compliance around IT.
So, banking, financial, so accountants too.
Certainly general practices and specialists, anyone in the medical field have got their
own set of compliance and requirements that they have which is regulated in Australia.
GPs are regulated by the College of GPs.
So every industry generally would have their own industry specific compliance that they
have to go through.
So, let's say I was a doctor.
And I just heard about this by watching the video, and I thought
"holy crikey I'm one of them."
I've gotta go and find this out.
What's the best way for someone to go and actually find out which industry compliance
laws they have to comply with?
The first thing I'd say is speak to an IT professional because generally we know what
are the industries and what are the general things that have to be covered.
But each business would then have an industry body that they would be able to go back to
and be able to ask.
Anything else that we should know when it comes to IT Compliance?
I generally say to people, just do the research and make sure that you're covered because
what might be relevant for your industry may not be relevant for another industry.
So really just make sure that you're covered because at the end of the day it's the business
owner and the directors of that company that are responsible
for the compliance of that business.
Alright, excellent. Thanks very much.
For those of you who'd like to find out more.
Please feel free to get in touch through the website sabervox.com.au