You are currently viewing the ‘Compliance’ Topic

Appointment of Information Officer template

Monday, March 1st, 2010

How will it help you ? By default the Chief Executive Officer of a private body or the Head of a public body is the Information Officer - this is as per the Promotion of Access to Information Act. This template letter will allow you to change the default ...

Top Privacy Risks

Thursday, February 11th, 2010

Many people are asking why they need to be aware of and, comply with the Protection of Personal Information Bill (PPI Bill)?  What are the risks associated with privacy?  What is the impact on an organisation?  What is the risk of non-compliance? Well apart from it being a new law, it ...

Privacy program tool template

Tuesday, January 19th, 2010

How will it help you? The tool is in the form of a spreadsheet. Its purpose is to identify the types of personal information(PI) you collect, store and use. It focuses on: Customer PI that you hold; and Employee PI that you hold. Customer PI The assessment usual involves the following, but will be tailored for your ...

Compliance is a process

Tuesday, December 22nd, 2009

Compliance with the law can be seen as a process that involves the following steps: Be aware of the issue and applicable laws Assess where you are (by doing assessments) Determine the gap between your reality and compliance with the law (usually a gap analysis) Find solutions to fill the gap Implement solutions to ensure ...

What must your organisation comply with?

Thursday, November 19th, 2009

Organisations must comply with all applicable laws (including ICT laws).  So for example, you must comply with RICA.  COBIT however is not a law and therefore you do not have to comply with it. Organisations should consider adhering to rules, codes and standards (including ICT rules, codes and standards). There is an ...

Characteristics of a compliant email management solution

Monday, November 16th, 2009

If you want to determine whether an email management solution "complies" with the ECT Act, then these are the questions that you should be asking: Is it capable of storing records in a trustworthy manner? Does the product protect the integrity, reliability, accessibility and accuracy of information throughout its lifespan? Does the product ...

ICT laws, rules, codes and standards

Wednesday, November 11th, 2009

This is a list of some of the laws, rules, codes and standards in South Africa that relate to ICT. Laws directly related to ICT - must comply Electronic Communications and Transactions Act (ECT Act) 25 of 2002 - View | Guide Promotion of Access to Information Act (PAI Act) 2 of 2000 ...

Are you aware of applicable ICT laws?

Thursday, October 1st, 2009

King III has confirmed what we have always known.  Companies  must comply with all applicable IT (or ICT) laws.  Due to the pervasiveness of ICT in business today this obligation has become all the more relevant.  This applies equally to any other organisation, government body, or entity.  This is nothing ...

Email compliance: email law in South Africa

Friday, August 14th, 2009

There are many benefits to be gained by managing your emails properly. These are some of them: the ability to automatically migrate the emails to other storage media, thereby making the email servers more efficient and users more productive; the ability to make the email system serve as an organisational knowledge store, ...

Electronic billing - the legal requirements

Friday, October 17th, 2008

Yes, you can issue bills (invoices, credit and debit notes) electronically instead of in paper format.  But there are some legal requirements that have to be met. Failure to meet the legal requirements can invalidate your bills and result in a fine or penalty.  The requirements set out by SARS ...