Data protection management (DPM)

The lack of security resources of IT organizations, the rapid shift to cloud computing, compliance requirements, and the rapid rise of threats such as “Frauds” or “Ransomware attacks” remain the most important current security challenges. It is already becoming apparent that there will be massive disruptions in the security ecosystem. This will have a major impact on the industry and also on the requirements and responsibilities of the Chief Information Security Officer (CISO).

Implementation according to EU-DSGVO and BDSG

With our DSM tool, you build a legally compliant data protection management system. You will be guided step by step through all data protection topics – from the creation of the processing directory to the deletion concept to the management of data protection incidents. It goes without saying that it is also possible to maintain related documents. We have already prepared all the reports required to meet the requirements of the GDPR for you.
Umsetzung in GRASP
Verzeichnis der Verarbeitungstätigkeiten
Dokumentieren Sie die Verarbeitung personenbezogener Daten.
Datenschutzfolgen- abschätzung
Dokumentieren Sie die Folgenabschätzung einer geplanten Datenverarbeitung.
Sicherheitsmaßnahmen aus Datenschutzbewertungen, Auditmanagement oder Datenschutzvorfällen. Pflege von technischen und organisatorischen Maßnahmen, die global ergriffen oder aus Datenschutzbewertungen, Audits, Datenschutzvorfällen, etc. resultieren.
Auditerstellung, -durchführung, -freigabe und Auswertung für Datenschutzaudit.
Dokumentieren Sie die Anforderungen aus dem Recht auf Löschung.
Legen Sie fest, welche Normen und Standards anwendbar sind.

Modular assemblable

With GRASP, you can build up your data protection management in a modular way according to your ideas. It offers all the necessary management modules for implementing the General Data Protection Regulation (GDPR) “ex works”. Whether you are a data protection officer or a company owner, GRASP allows you to customize your data protection system. This makes data protection very effective and can be managed by one to a few people.

GRASP at a glance

Download the free flyer with all the important information about GRASP.

Data protection management workflow

  1. Define applicabilities
  2. Logging of processing activities
  3. Perform a threshold analysis
  4. Perform data protection impact assessment (DSFA)
  5. Maintain deletion policies
  6. Manage the measures
  7. Identify commissioned processors
  8. Generate audit reports for compliance with DSGVO and BDSG
  9. Record and handle data protection incidents