CISOs and GDPR: The Top 3 Concerns

This article discusses GDPR enforcement beginning May 25, 2018 and summarizes three primary CISO concerns—uncertainty over potential fines, confusion about what is required for compliance, and the scope of work needed to achieve compliance—recommending that organizations focus on controllable measures, consult ICO guidance (including a 12-step guide), appoint Data Protection Officers where required, and consider security testing services such as those offered by HackerOne.