1. Home
  2. Our Services
  3. iTGRC, Regulatory Compliance Assurance

iTGRC, Regulatory Compliance Assurance

Regulatory compliance is an organization's adherence to laws, regulations, guidelines, and specifications relevant to its business. It deals with the concern that one’s organisation ...

Is meeting regulations and ever growing compliance requirements proving a challenge? Think of Risk, Compliance and Privacy by Design.

Regulatory compliance is an organization's adherence to laws, regulations, guidelines, and specifications relevant to its business. It deals with the concern that one’s organisation is aware of and taking required and cost effective steps to comply with relevant laws and regulations.

 
 
 
 
The laws may be local ( PDPA, Singapore, Hong Kong and Malaysia ) or international (EU GDPR), and may cover a vast array of compliance issues. Violations of regulatory compliance can very often result in severe legal punishments, including fines or withdrawal of the product from the marketplace.
 
However, regulatory compliance goes much further than the above definition, and the term can also cover requirements around business systems, IT, environmental legislation, health and safety, and other aspects of business and commerce. The term can cover any officially sanctioned laws or edits covering a country, area of origin, or territory into which goods or services may be sold or used.
 
Hence, Quality systems that adhere to good policy are now an important part of many businesses, and it is increasingly likely that your customers prefer to deal with a company which has an accredited system that gives assurance and shows performance through compliance.
 
____________________________________________________________________________________________
 
 

GDPR for Data Protection

ISO27001 for Information Security Management supporting PDPA

ISO/IEC 9001 for Quality Management

TRM for Technology Risk Management 

 
____________________________________________________________________________________________
 
 
 

GDPR  

  Personal Data Security and Protection

The EU GDPR will help protect the privacy of individuals and give regulatory authorities greater powers to take action against businesses that breach the new law. The Regulation also applies to non-EU companies (inside and outside of EU) that process personal data of individuals from EU.
 
 

What the GDPR means for businesses in Asia? 

  • The appointment of a data protection officer (DPO) will be mandatory for companies processing high volumes of personal data and good practice for others.
  • Privacy risk impact assessments will be required for projects where privacy risks are high.
  • Products, systems and processes must consider privacy-by-design concepts during development.
  • Data controllers must ensure adequate contracts are in place to govern data processors. They must also have a legal basis for processing personal data. Either alone or jointly with others, determines the purposes for which and the manner in which any personal data is, or is to be, processed.
  • Data processors can be held directly liable for the security of personal data.
  • 72 hours - the time a controller has to report a data breach after becoming aware of a breach, unless the breach presents a low risk to the individual’s rights.

 

Penalties

There will be tough penalties for those that fail to comply. These will be up to: 4% of annual global turnover or €20 million whichever is greater. Choose a GDPR Self-Assurance package and find out how you can fulfill the requirement in no time. Click here

Click  for your inquiry. We are always glad to assist you.
 
____________________________________________________________________________________________
 
 
 

ISO27001 

  Security Management System that fulfills PDPA and GDPR

With the growing complexity of regulations and need for operational transparency, organizations are increasingly adopting consolidated and harmonized sets of compliance controls: ISO27002 an information security standard published by the International Organization for Standardization (ISO) or Code of practice for information security management.

Services offered by iTGRC Asia

Expected deliverable to your organizations

  • Information Security Management Audit Report (Findings) 
  • Information Security Governance and Management Compliance Program assessment Report
  • Control Gap Analysis Report
  • Recommendation of Mitigation, Response plan or Remediation
  • Recommendation of a Compliance Strategy, or Improvement plan based on industry Best Practices or International Supervisory bodies requirements, such as that by Federal Financial institutions examination council (FFIEC)
 
    Click  for your inquiry. We are always glad to assist you. 
 
____________________________________________________________________________________________
 
 
 

ISO/IEC 9001  

  Quality Management System

Start now and achieve ISO9001 certification in a matter of months.

Implementing an ISO9001 Quality Management System (QMS) will motivate staff by defining their key roles and responsibilities and will achieve cost savings through improved efficiency and productivity.  

An ISO9001 QMS will enable you to identify product or service deficiencies and make improvements quickly, resulting in less waste, less inappropriate or rejected work, and fewer complaints. Your customers will notice that orders are met consistently, on time and to the correct specification. This can be the basis for company growth, opening up market opportunities.

ISO/IEC 9001 consultancy service

Our consultants use methodologies and tools that have been developed and honed over 10 years. And compelling reasons for iTGRC Asia consultancy, in collaboration with IT Governance Ltd. to assist you through the journey year on year.
 

Free initial assessment enables you to assess where you are (after all, you probably already meet many of the requirements) and identify how you can progress with us to success.

fixed price consultancy enables you to control all the costs of achieving certification.

Our implementation approach and methodology is pragmatic, proven and straightforward.

We will help you increase internal buy-in by leveraging your resources to achieve your certification/conformance goals.

We focus on transferring knowledge and skills to you and your staff so that you can continue meeting compliance targets after the initial implementation period ends. 

We are a one-stop shop with comprehensive and integrated ISO9001 resources.

In short, we help tailor your Quality Management System so that it suits your requirements, is cost-effective to operate and still continues to meet ISO9001 requirements.  

We can link your ISO9001 Quality Management framework with your health and safety, environment and information security management frameworks.
 
Our simple, 'no quibble' 100% guarantee of successful certification removes all worry.
 
More importantly, our strategic partner IT Governance Ltd: your ISO9001 consultancy partner is approved by:
BSI. Associate Consultant Program
DNV Consultant gateway
ISOQAR Associate Network
Click  for your inquiry. We are always glad to assist you. 
 
____________________________________________________________________________________________
 
 
 

TRM 

  Technology Risk and Security Management

Managing your technology risk to meet Government or Regulatory requirements is not uncommon in most countries, especially industries where business or investment is heavily underpinned by technology for automation, productivity, efficiency or innovation. It's particularly significant and prominent today in banking, finance, insurance. The benefits are more than, and not limited to;

  • Avoid Financial Penalty
  • Avoid Criminal Imprisonment 
  • Business Continuity and Sustainability 
  • Prevent Reputation and Business Impact, and
  • Propagation or Introduction of outsourced third-party risks

It's self-evident that the following Services, are the essential as part of a sound compliance assurance scheme:

  • Review of Compliance program for effectiveness
  • Internal Control Review
  • Control Gap Analysis 
  • Policy and Procedure Development
  • Policy Implementation and evaluation
  • Managing Transition to Compliance
  • Mitigation/Remediation

that promise the Deliverables below, which shall satisfactorily achieve the control objectives and your business goals.

  • Risk Assessment Report
  • Audit Report (Findings)
  • Control Gap analysis Report
  • Recommendation of Mitigation or Response plan or Remediation
  • Recommendation of a Compliance Strategy, or Improvement plan based on industry Best Practices or supervisory requirements.
Click  for your inquiry. We are always glad to assist you.
 
____________________________________________________________________________________________
 
 

 

iTGRC Asia Pte Ltd

+65 9338 0000

   

+65 6818 0801

    information@itgrc.asia

By submitting your information to iTGRC Asia Pte Ltd, you have agreed to our Privacy Statement