课程背景 Course Background:
2018年5月25日，GDPR（欧盟通用数据保护条例，General Data Protection Regulation）正式生效，开启了一个新的数据合规时代。1000万到2000万欧元，或企业全球年营业额2%到4%的罚款让所有受其管辖的企业都必须将数据保护合规提升到生存高度予以应对。面对新法，企业的应对仍然显得十分不足。2017年，英国政府在“四大”协助下发布了富时350指数网络治理健康检查报告，报告显示近六成的受访者表示对GDPR不太或并不了解，同时仅有8%的受访者表示已经做了充分的准备，接近75%的人表示仅做了部分准备。那么从国内外来看，未来数据安全法规趋势如何？网络安全问题的本质是什么？企业如何规避不合规数据的风险？怎样提供可切实实施的风险整改计划？

课程收益 Course Benefits:
了解GDPR、中国网络安全法及其他相关法律法规要点
Understand the main points of GDPR, the Cybersecurity Law of the People’s Republic of China and other relevant laws and regulations
了解GDPR及其他相关法律对于企业所处行业的影响程度
Understand the impact of GDPR and other relevant laws and regulations on the industry
了解企业各个层级部门应如何应对外界监管规定
Understand how the departments of enterprises at each level should cope with the regulations
掌握提升企业数据合规、网络安全的方式方法
Learn the ways and means to improve enterprise data compliance and cybersecurity
了解危机发生时应如何进行处理和应对的方法
Understand how to deal with crises
学习先进风险评估框架，并能运用到实际工作中
Learn advanced risk assessment frameworks and apply them to practical work

谁该来参加 Who Should Attend:
企业合规、法务、信息安全部门负责人，拥有合规、法务、信息安全职能的纪检监察部门负责人，从事合规、法务、信息安全实务操作的部门主管及一般员工，其他对数据合规、网络安全感兴趣的有识之士，以及想提高企业综合管理能力的优秀积极人士。
Persons in charge of corporate compliance, legal affairs and information security departments; persons in charge of discipline inspection and supervision departments with the functions related to compliance, legal affairs and information security; department heads and general employees engaged in compliance, legal affairs and information security practices; far-sighted persons interested in data compliance and cybersecurity; and activists who want to improve the comprehensive management capabilities of their enterprises.

课程大纲 Course Outline:
GDPR及相关法律法规
GDPR and relevant laws and regulations
GDPR概述
GDPR overview
中国网络安全法概述
Overview of the Cybersecurity Law of the People’s Republic of China
数据隐私保护 Data privacy protection
网络安全等级保护 Classified protection of cybersecurity
信息跨境传输 Cross-border information transmission
网络安全监控与应急响应　Cybersecurity monitoring and emergency response
全球数据保护法律法规环境
Global data protection laws and regulations
数据合规、网络安全的趋势
Data compliance and cybersecurity trends
数据安全事件及处罚案件
Data security incidents and punishment cases
企业应对现状
Enterprises’ response
从国内外大背景看趋势
Trends from the perspective of domestic and international background
企业应对策略
Enterprises’ countermeasures
管理层应对策略
Countermeasures at the management level
业务层应对策略
Countermeasures at the business level
技术层应对策略　
Countermeasures at the technology level
识别敏感信息
Identification of sensitive information
数据生命周期管理
Data lifecycle management
数据信息的收集与使用
Collection and use of data information
数据信息的加工、传输与共享
Processing, transmission and sharing of data information
数据信息的保存与销毁
Preservation and destruction of data information
识别个人数据、重要数据、商业秘密数据
Identification of personal data, important data and trade secrets
建立风险评估矩阵
Establishment of risk assessment matrix
怎样确定数据安全评估标准
How to establish data security assessment standards
定量化衡量风险等级及对企业的影响
Quantitatively measure risk levels and risk impact on enterprises
怎样提供可切实实施的风险整改计划
How to develop a practical and feasible risk control plan
建立数据治理框架
Establishment of data governance framework
数据治理的全过程
Whole process of data governance
应对型数据治理及主动型数据治理
Passive and active data governance
数据管理能力成熟度模型
Data management capability maturity model
搭建数据合规体系
Establishment of data compliance system
进行GDPR及网络安全法适用性评估
Evaluate the applicability of GDPR and cybersecurity laws
划分数据类型及区别制定合规策略
Classify data and develop different compliance strategies based on the classification
更新与完善隐私政策
Update and improve privacy policies
建立风险评估、记录与响应机制
Establish risk assessment, recording and response mechanisms
搭建网络安全体系
Establishment of cybersecurity system
网络安全威胁类型
Types of cybersecurity threats
常见的安全服务机制
Common security service mechanisms
构建网络安全防护体系政策建议
Policies and suggestions for building a cybersecurity protection system

关于讲师 About the Speaker:
陈先生任职于安永法证及诚信合规服务部门，担任法证技术合伙人。他专注于持续合规监控和管理体系、贸易合规、数据合规、信息和隐私保护、反垄断、风险预测分析、以及电子取证。以上领域均需要对结构化或非结构化格式的财务、运营和交易数据进行大量的深入分析。陈炽带领的团队利用数据可视化、统计建模和文本挖掘等先进的分析技术，帮助客户及时、高效地识别高风险交易或者行为，并积极提供应对办法。陈炽先后在美国、澳大利亚以及中国就职，拥有超过16年的综合咨询和审计工作经验，为众多财富500强企业和跨国公司提供服务，涉及生命科学、制造业、消费品、工业产品、建筑、科技、金融服务、能源和电讯等多个不同行业。
Chen, a forensic technology partner of EY Forensic & Integrity Services, specializes in proactive compliance monitoring and management systems, trade compliance, data compliance, information and privacy protection, antitrust analytics, predictive risk analytics and eDiscovery, all of which require in-depth analysis of large and disparate sets of structured and non-structured financial, operational and transactional data. He leads his team to help clients identify high-risk transactions or behaviors in a timely, efficient and effective manner by leveraging advanced data analytics techniques including but not limited to data visualization, statistical modeling and text mining. He has more than 16 years of combined advisory and audit experience in the US, Australia and China. Besides, he has served many Fortune 500 and multinational companies in a variety of industry sectors including life sciences, manufacturing, consumer goods, industrial products, construction, technology, financial services, energy and telecommunications.