ISC2 Course: GDPR for Security Professionals - A Framework for Success

[kimberdray]

Great opportunity for members: GDPR Professional Development and CPEs: https://learn.isc2.org/d2l/home/7036

[getvenky1]

I'm having difficulty in going through videos , its extremely slow even though the general network is fast and videos from other platforms play without any lag.

[jbrandt]

This course was a great member benefit. I liked how (ISC)2 fused information together but it was the in-house testimonials that I most appreciated. It's one thing to preach matters of security but another to unveil their personal experiences.  Great work!

[saikishoretayi]

Congrats,
However, I am getting not authorised when accessing course link which you shared.

[Lamont29]

Are you a member? Have you passed an ISC2 test before?

--
Lamont Robertson
CISSP, CISM, CISA, MCSE

[Shannon]

The course is very good, and a great opportunity to get oneself familiar with GDPR. However, I'm lost on one point...

At the start the presentation says that 'GDPR doesn't include privacy or personally identifiable data.'  (I'd have attached the screenshot, but the option to add photos doesn't seem to be working.)

Yet many of the articles make a reference to EU citizens' rights to privacy and also define personal data --- so what exactly does this mean? Assuming it isn't an error, someone please enlighten me.

@SamanthaO_isc2 / @Kaity the issue that I've been experiencing with adding photos had earlier been reported on Member Support; please do the needful. Thanks.

[rslade]

> Shannon (Contributor II) posted a new reply in GDPR on 11-04-2018 07:21 AM in the (ISC)² Community :

>    At the start the
> presentation says that 'GDPR doesn't include privacy or personally
> identifiable data.

OK, that's bizarre, since GDPR is basically an update to the original EU privacy directives, with an added emphasis on accountability.

[Shannon]

@rslade wrote:

OK, that's bizarre, since GDPR is basically an update to the original EU privacy directives, with an added emphasis on accountability.

---

Yes, I was stumped. A later section in the course dealing with confidentiality has stated the following: -

Devices that are used to access the systems remotely must have the login credentials stored on the hard-disk, as it would be potentially disastrous if those credentials were compromised

I've always understood that it's inadvisable to store credentials on devices lest they get compromised there, so this was another mystery that the course offered.

(I took screenshots of all this; alas, the Insert Photo option here is presently limited to an aesthetic appeal)

[rslade]

> Shannon (Contributor II) posted a new reply in GDPR on 11-05-2018 08:20 PM in the (ISC)² Community :

>  A later section in the course dealing
> with confidentiality has stated the following: -   Devices that are used
> to access the systems remotely must have the login credentials stored on the
> hard-disk, as it would be potentially disastrous if those credentials were
> compromised   I've always understood that it's inadvisable to store
> credentials on devices lest they get compromised there, so this was
> another mystery that the course offered.

It couldn't possibly be that ISC2 is in a hurry to get these courses out, and isn't
doing quite enough QA, could it?

Nah, not ISC2 ...

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Just because your voice reaches halfway around the world doesn't
mean you are wiser than when it reached only to the end of the
bar. - Edward R. Murrow
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

[Shannon]

Now that I've completed this, I'll say that while it was a good learning experience it's tainted by the inaccurate information presented and by the errors in the assessment.

(I took screenshots to be sure I wasn't hallucinating, but they can't be uploaded here at the moment.)

While there's a provision to evaluate this course at the end, some of the survey questions were not presented properly or were redundant, so I quit midway...  

[Bryiantan]

---

I'm a little lost, why the CPE Type is "Prepare For Presentation for (ISC)² related event"? and why we need to fill out the "Subject Taught"? The way I see it, we didn't prepare the presentation nor teach the subject.

@gauravdixit06 wrote:
**** If this is helpful then provide me Kudos or Rate this Post and Reply *****



Dear partie /All ,



I am here by giving giving you end to end steps.



Begin and end date of this then enter "Begin " [Green Color ]

then you will get option as " have you fulfilled a CPE offerd by ISC2 "

then say " YES"

then you will have option as select a CPE type

Member submitted ( Click on this as I selected this option)

then Choose

"Prepare For Presentation for (ISC)² related event" ( Choose this )

now you enter detail

==> Enter Details

Subject taught : ==> GDPR for Security Professionals: A Framework for Success ( you can use this )
Credits ==> 8

now you have to upload your evidences and proofs of GDPR Certificate , final Assessment PDF , and other proofs.

now you will have 8 CPE auto approve but ISC2 can do audit always . this is auto approve as ISC2 believes on each member



**** If this is helpful then provide me Kudos or Rate this Post and Reply ****



Hope this helps you !!



Thanks!!



Gaurav

---