# data[].attributes.body
Pros - Using small bursts of snippets between projects is allowed, so you can start working on different sections of projects at the same time, agile and flexible, contribution is encouraged.

Cons - Not get completed, lazy, run into multiple issues with starting the second project when the first is still incomplete. No promises or guarantees, LOSS of MONEY, Big projects aren’t good to use agile style software development - Small indie games (Octodad, Bastion).

# data[].attributes.body
Design - build - test/debug - maintain (patching and updating).

# data[].attributes.body
Does the company have security guards? Does it have ID card systems?, FOBS, RFID, Mantraps(to stop tailgating).

# data[].attributes.body
Helpdesk tickets.

Technical advice and guidance.

SLA - Service-level agreement (Ticketing timline)

OLA - Organisational level agreement.

Change in request.

Internal and external communication.

# data[].attributes.body
External Communication.
Customer complaints on products.
Advertisement and designs.
CRM - Customer relation management software. - Verify and manage relations with the customers.
Promotion of goods.
Conversation leads - potential sales.
Analytics - analysis
Target of Commissions.

# data[].attributes.body
Reconciled data
Payroll.
Revenues & profit
calculations
Governance
Expenditures - expenses
Analytics - analysis

# data[].attributes.body
Grievances & Disputes.

Leave & sickness.

Internal communications.

Job roles & vacancies .

Contracts .

Disciplinary.

Update details / moving location.

Relations with employer and employee are Internal.

Internal Affairs.

# data[].attributes.body
Procurement - Purchase - Buying the product

ROI- Return in investment - Making a decision on when the product has fulfilled the investments.

Which of the following is a correct steps for asset management?

Correct orders of steps - Plan - procurement - monitor - upgrade - dispose. - PPMUD

Asset life cycle (value)

Plan - design - procure/build - commission - operate maintain & monitor performance - Modify or upgrade - Decommission (Replace or Dispose) - Identify needs.

# data[].attributes.body
Was introduce in 2000

Information that can be given to general public such as, asking NHS about what medicine/treatment or operation are available.

Freedom of Act does not cover personal, private or sensitive information to the general public.

So the NHS can’t disclose personal information such as customer name, address.

When an individual asks a company about their personal information - Can you present personal information to others/general public - No - Then this is a GDPR not freedom of information.

# data[].attributes.body
Who enforces GDPR and DPA

Subject - Individually with private data being held - Such as me/everyone - Is your data correct? - Is your data in a manual file or on a computer?

Controller - A Data controller is classified as the person or persons in an organization who is in charge of the collection and use of personal data.

Processor - “data processor”, in relation to personal data, means any person (other than an employee of the data controller) who processes the data on behalf of the data controller.

The information commissioner’s office (ICO) upholds information rights in the public interest, Promoting openness by the public bodies(freedom of information) doesn’t contain private information and data privacy for individuals.

Head of enforcement
Financial penalties decisions and the amount
Serving a Section 159 Notice.

Supervisory Authority
Investigate complaints and issue penalties.

Judge
Passes the prison sentences

# data[].attributes.body
Procedure that needs to be followed to fulfil part of your job.

This could include generating tickets, disposals, asset management all have procedures that need to be followed to correctly fulfil jobs.

Standard Of Procedure for when a user calls help desk could include having to verify their name and some sort of personal information such as their DOB.

# data[].attributes.body
If you transfer files that you're not unauthorised to, then you are breaking a Computer Misuse Act but if you open unauthorised files, then you're breaking Data Protection Act and GDPR legislation.

# data[].attributes.body
Asking security questions via phone calls

Disposal of electrical equipment (WEEE - Waste Electrical & Electronic Equipment) - wipe data -  following company policy

Ticketing system

# data[].attributes.headline
GDPR - General data protection regulation

# data[].attributes.subject
GDPR - General data protection regulation

# data[].attributes.body
Is a European legislation.

GDPR came into force on May 25, 2018.

This law is harsher compared to the Data Protection Act.

Fines are paid in Euros, Small and medium business fines can go up to 10 million or 2% of annual gross profit turnover before tax.

Big business can be fined up to 20 million or 4% annual gross profit turnover.

# data[].attributes.body
The Data Protection Act came out in 1998 but has been amended in 2018.

1998 law was outdated and needed to be refreshed to meet the current technology standards such as social media.

This law is strictly a UK law and does not include the EU.

UK fine under the DPA 2018 - Max of £500,000.

Fines are paid in British pounds.

If you open a file that you're not authorised for, then you're breaching the data protection act.

# data[].attributes.body
ISO 27001 – (International Organisational Standardisation)

27001 is a certificate

This certificate is for Information Security Management System

How to protect information;

·         Bitlocker

·         VPN

·         Password protected website

·         Firewalls

·         Physical (Security, protocols, checkpoint etc)

# data[].attributes.body
Came out in 1990
Max 10 years in prison sentence