Third Parties Having Access to Your Company’s Personal Information

  • Every company rely on third parties to offer their services and products or to run specific business activities.
  • Third parties usually have access to your company’s information systems and personal information and can be an entry point for hackers to attack your information system.
  • If your third parties do not meet regulatory and security requirements, your data might be exposed to cyber threats.
  • Remember, no matter how secure your information systems are, you remain responsible for your data when handed over to third parties.

Your challenges

 

 

  Are you fully aware of your third parties’ security practices, and the level of information security they provide?

  Are you currently in the process of selecting a new service provider and believe that information security maturity level should be taken into consideration?

  Are you facing difficulties in assessing the maturity of the information security of your numerous third parties?

  Was a recent security incident imputed to one of your third parties due to missing or inappropriate security controls?

  Are you confident that your Operators will not prevent you from being compliant with POPI?

How we can help?

 

  • In order to reduce the effort required and the duration of your third parties’ management activities, we have opted for an approach where every interaction related to the assessment is performed on a one-stop shop.

 

  • You need to:

    • Use a questionnaire, similar to GoPixel’s Operator POPI Compliance Questionnaire – a questionnaire meant to assess supplier’s compliance with POPI; and

    •  Make provision for certain clauses in your contracts with suppliers, similar to GoPixel’s Supplier Information Processing Agreement – a contractual document meant to establish the limits and conditions under which a supplier (operator) can process personal information on behalf of the Company (Responsible Party)

 

  • Learn more about our GoPixel’s POPI / PAIA Compliance Documentation Toolkit, pricing and options here.