Intelligent CISO Issue 15 | Page 45

industry unlocked A disconnected approach to cybersecurity struggles to fight back against these complex, coordinated attacks. This is where cybersecurity systems come in: integrated products working together to outsmart today’s hackers. consent from the owners of this data at the time of its collection. They must demonstrate they have proper controls over the processing and security of personal data, including how data is used, stored, kept up-to-date, accessed, transferred and deleted. How do regulations (like GDPR for example) impact the industry? Organisations in the hospitality sector are likely to have customers who agree to having their data stored because it is important for the effective management of loyalty programmes or ensuring returning customers receive the highest quality service. So it’s important that the right measures are in place to ensure the best possible protection of this highly confidential information. JEFF OGDEN, GENERAL MANAGER – MIDDLE EAST AND INDIA, MIMECAST Hospitality is probably the sector that is most affected by GDPR when looking at how the legislation impacts countries outside of Europe. That’s because it’s the one industry that tends to store and process data from individuals all over the world. If a European were to travel to any hotel in the Middle East, that hotel www.intelligentciso.com | Issue 15 Harish Chib, Vice President, Middle East and Africa, Sophos would have to ensure they are GDPR compliant because they would now be responsible for storing and processing that individual’s data. It also tends to be an industry that stores some of the most confidential information, like passport numbers. GDPR requires organisations to obtain explicit (opt-in, rather than opt-out) GDPR should be seen as a solid best practice for security and marketing guidance instead of just another compliance burden. And with more legislation like this popping up around the globe, organisations should evaluate 45