Artigo em revista científica Q2
Information security frameworks for assisting GDPR compliance in banking industry
João Serrado (Serrado, J.); Rúben Pereira (Pereira, R.); Miguel Mira da Silva (Mira da Silva, M.); Isaias Scalabrin Bianchi (Bianchi, I. S.);
Título Revista
Digital Policy, Regulation and Governance
Ano
2020
Língua
Inglês
País
Reino Unido
Mais Informação
Web of Science®

N.º de citações: 0

(Última verificação: 2021-01-19 15:35)

Ver o registo na Web of Science®

Scopus

N.º de citações: 0

(Última verificação: 2021-01-15 10:08)

Ver o registo na Scopus

Abstract/Resumo
Purpose: Data can nowadays be seen as the main asset of organizations and data leaks have a considerable impact on the organization’s image, revenues and possible consequences to the affected clients. One of the most critical industries is the bank. Information security frameworks (ISF) have been created to assist organizations and other frameworks evolved to update these domain practices. Recently, the European Union decided to create the general data protection regulation (GDPR), applicable to all organizations dealing with personal data of citizens residing in the European Union. Although considered a general regulation, GDPR implementation needs to align with some industries’ laws and policies. Especially in the Bank industry. How these ISF can assist the implementation of GDPR is not clear. Design/methodology/approach: The design science research process was followed and semi-structured interviews performed. Findings: A list of practices to assist the bank industry in GDPR implementation is provided. How each practice map with assessed ISF and GDPR requirements is also presented. Research limitations/implications: As GDPR is a relatively recent subject, it is hard to find experts in the area. It is more difficult if the authors intend to find experienced people in the GDPR and bank industry. That is one of the main reasons this study does not include more interviews. Originality/value: This research provides a novel artefact to the body of knowledge. The proposed artefact lists which ISF practices banks should implement to comply with GDPR. By doing it the artefact provides a centralized view about which ISF frameworks (or part of them) could be implemented to help banks comply with GDPR.
Agradecimentos/Acknowledgements
--
Palavras-chave
Information security,Frameworks,GDPR,General data protection regulation,Data protection
  • Ciências da Computação e da Informação - Ciências Naturais
  • Economia e Gestão - Ciências Sociais