Resources
Case Studies
Data Mapping and Data Security Review for Global Asset Management Company

Data Mapping and Data Security Review for Global Asset Management Company

The client

Top 20 Global Asset Management Company

The work

Xcina Consulting was approached by a large, global asset management company to help them understand the data protection compliance position within their complex operating environment. The work was broken down into two work streams, namely a data mapping exercise and a data security review. The data mapping exercise included identifying:

All the jurisdictions in which the client operates.
Primary, secondary and tertiary sites.
Key systems / applications (including those that are cloud-based).
Types of personal data processed by each business unit.
Significant legislation and regulation pertinent to data protection in each country.

The data security review focused on:

Aspects of IT security.
Third party management.
Governance related to data protection policies, procedures, controls and measures.
Backup, storage, restore and disposal of personal data.

How we helped

We identified multiple control gaps and provided prioritised recommendations for improvement. Additionally, we provided the insight to help our client understand how the EU General Data Protection Regulation would impact them globally.

Value added

As a result of the data mapping and data security review, it was deemed that our client would benefit from the implementation of a robust Data Protection framework, which we also led.

Industry and sector:

Financial Services

Solutions and service area:

What our clients say

"Xcina is always responsive to any question we have during the time we are implementing data protection remediation activities, they keep us informed and understand what we need and what we’re trying to do. "

Getac Technology Corp, Legal Affairs Center

ParkMobileUK, Managing Director

"Xcina Consulting performed an annual review of our card data environment, and ensured that we are compliant with the PCI-DSS. We continue to work with their experienced QSAs, leveraging their guidance and best practices so we have the highest possible level of security controls in place."

DKB Brands, Data Protection Officer

"Xcina really helped us to kick start our data protection compliance process. They took the time to speak to all departments of the business and outlined our highest risk to lowest risk areas. The insight and guidance they provided was essential for our business to become GDPR compliant."

Portman Settled Estates Limited, Estate Secretary

"Xcina’s ongoing support has ensured that our employees feel confident when dealing with data protection matters, with best practice knowledge and expertise from consultants who have taken the time to get to know our business and our industry."

National Bank of Kuwait, Compliance Officer

"Xcina worked with us on a number of data protection matters, including subject access requests and gave helpful, practical advice which reflected their understanding of technology issues as well as legal matters."

Your World Recruitment, Group IT Director

"We have worked with with Xcina successfully for two years, initially on internal GDPR GAP analysis. We now have them engaged as our ‘Virtual DPO’ provider and regularly receive useful, pragmatic and, more importantly, actionable advice on all areas of Data Protection."

Quadrangle Research, Group Chief Operating Officer

Discover how we have supported businesses like yours >>