Start Gap Assessment

Video 09Governance and evidence

Processor Oversight and Impact Assessment

Keep every processor on record under a valid contract and assess higher risk processing, shown through a diagnostics chain.

Duration 0:393 videos in this series

Videos in this series

View all
  1. Video 09Now playingProcessor Oversight and Impact AssessmentDuration 0:39
  2. Video 10Audit Evidence and Management ReviewDuration 0:37
  3. Video 11Significant Data Fiduciary ReadinessDuration 0:44

Description

Keep every processor on record under a valid contract and assess higher risk processing, shown through a diagnostics chain.

A diagnostics chain shares patient data with a cloud host, a courier and an SMS provider. Under the DPDP Act the organisation stays responsible for what its processors do and may engage them only under a valid contract.

TrustOS keeps every processor on record with services, responsibilities, contract references and review history. For higher risk processing, teams document the impact on people, assign remediation and keep the review decision, so risk decisions and approvals stay traceable from assessment to closure.

In this video

  • Responsibility for processors
  • Processor records and reviews
  • Impact assessment workflow
  • Traceable risk decisions

Put the DPDP Act into practice with TrustOS.

A scoped gap assessment shows where your organisation stands today and which controls to put in place first.

Start Gap AssessmentExplore TrustOS