Governance & Compliance

01
02
03
04
05
06
06
FINMA
Operational Risk
05
DPO SERVICE
04
LPD& GDPR
03
ISO CERTIFICATIONS
02
Business
Continuity
01
ICT Management &
CyberSecurity
Governance

Ensuring IT security, business continuity, protection of know-how and data, and compliance with industry rules and regulations. This is required of all companies, banks, trustees, professionals, institutions and other organisations, regardless of their size and sector. Security Lab Advisory SAGL supports all organisations in achieving their 'Governance & Compliance' objectives.

RELATED SERVICES
01

ICT Management & Cyber Security Governance (CIO/CISO)

The evolution of the market requires the business and technology area to provide increasingly innovative, quality and timely (time-to-market) services that are also secure. The ICT Management (CIO) and the Security Management (CISO) must guarantee organisational quality, effectiveness and efficiency of processes and services, management of cyber security risks, control of outsourcers, full satisfaction of Business and Customers.
Security Lab Advisory SAGL supports all organisations in the preparation of the ICT Management & Cyber Security Governance model, providing its many years of experience and expertise on international methodologies and best practices (COBIT, ITIL, NIST) and, if required, accompanying the organisation to ISO 27001 Certification.

02

Business Continuity

All organisations must prepare themselves in time to face a disastrous incident and crisis situation, in order to be ready to ensure, however, a minimum level of service and the survival of the organisation itself.Security Lab Advisory SAGL supports all organisations in the preparation of the Business ContinuityPlan and the definition and implementation of an adequate Business Continuity Management System that, if required by the organisation, can obtain ISO 22301 Certification.

03

ISO 27001 Certifications and other

Security Lab Advisory SAGL's multi-disciplinary team of consultants supports organisations in building their own management system, adapted to the size and particularities of the organisation ('tailor-made suit'), in order to obtain the international certification of interest:
Information Security and Privacy (ISO 27001, ISO 27017, ISO 27018, ISO 27701),
Business Continuity (ISO 22301),
IT Service Management (ISO 20000),
Worker Safety (ISO 45001),
Environmental Protection (ISO 14001),
Quality Management (ISO 9001),
Social Accountability (SA 8000).

04

LPD & GDPR Consultancy

Security Lab Advisory SAGL provides its technological, organisational, management and legal expertise and experience in numerous tailor-made projects to support all organisations in achieving full compliance with data protection regulations: Federal Data Protection Act (LPD) and EU Regulation 2016/679 (GDPR).

READ MORE
05

DPO Service (Data Protection Advisor)

Under the new data protection regulations, some organisations require a 'Data Protection Officer' or 'Data Protection Advisor'.
In order to ensure multidisciplinary expertise and the absence of conflicts of interest within the organisation, the regulations stipulate that an external consultant may also be appointed.
Security Lab Advisory SAGL offers a DPO Service Contract, with specific assignment to the leader of the multidisciplinary team of consultants, in order to fulfil, in compliance with the principle of independence, all the functions and tasks required by the regulations (LPD/GDPR).

06

FINMA Operational Risk

FINMA regulations and circulars require all players in the financial sector to apply a management and control model for Operational Risk (Circular 2008/21), Cyber Security and Outsourced IT Services (Circular 2018/3). Our many years of knowledge of the financial sector, multiple project experiences, multidisciplinary expertise and knowledge of international best practices and methodologies in operational risk assessment, cyber security management, IT service management and IT outsourcer control are brought together to support Ticino's banks and fiduciaries in achieving full compliance with the requirements imposed by the regulator (FINMA).