Information security frameworks for assisting GDPR compliance in banking industry João Serrado Primary Author Ruben Filipe Pereira Additional Author Miguel Mira da Silva and Isaías Scalabrin Bianchi Additional Author mixed material bibliography ENGLAND EMERALD INSIGHT 2020 monographic en ENGLISH

Text

BAIK Abstract Purpose – Data can nowadays be seen as the main asset of organizations and data leaks have a considerable impact on the organization’s image, revenues and possible consequences to the affected clients. One of the most critical industries is the bank. Information security frameworks (ISF) have been created to assist organizations and other frameworks evolved to update these domain practices. Recently, the European Union decided to create the general data protection regulation (GDPR), applicable to all organizations dealing with personal data of citizens residing in the European Union. Although considered a general regulation, GDPR implementation needs to align with some industries’ laws and policies. Especially in the Bank industry. How these ISF can assist the implementation of GDPR is not clear. Design/methodology/approach – The design science research process was followed and semistructured interviews performed. Findings – A list of practices to assist the bank industry in GDPR implementation is provided. How each practice map with assessed ISF and GDPR requirements is also presented. Research limitations/implications – As GDPR is a relatively recent subject, it is hard to find experts in the area. It is more difficult if the authors intend to find experienced people in the GDPR and bank industry. That is one of the main reasons this study does not include more interviews. Originality/value – This research provides a novel artefact to the body of knowledge. The proposed artefact lists which ISF practices banks should implement to comply with GDPR. By doing it the artefact provides a centralized view about which ISF frameworks (or part of them) could be implemented to help banks comply with GDPR. General data protection regulation, Data protectio Information security, Frameworks, GDPR NONE Repository Universitas Langlangbuana Sistem Repository Elektronik Skripsi, Tesis, Desertasi dan Penelitian Dosen Universitas Langlangbuana JA101.DPRG20V22.3.3 My Library Information security frameworks for assisting GDPR compliance in banking industry containerImg.png.png 2386 2023-12-16 13:34:09 2023-12-18 11:47:48 machine generated