Overview

The SFC issued a circular on the use of external electronic data storage (‘EDS’), which includes public and private cloud storage, on October 31, 2019. Due to limited IT resources, many licensed corporations are facing challenges on compliance of the new requirements. Moreover, many might have used cloud services or SaaS applications to help them maintain their business operations during the covid-19 period.

In this seminar, the speaker will provide practical recommendations on using cloud services or SaaS applications. In addition, he will also cover the defence and detection recommendations on handling the target phishing and Business Email Compromise attacks in case of cloud-based SaaS application such as Microsoft 365 and G Suite.

Objective

By the end of the seminar, participants will be able to know the compliance requirements on the EDS regulation issued by the SFC on Oct 31, 2019. The speaker will also provide guidance on how to select the right cloud service providers from a practical and technological perspective.

Content

1. What is EDS Provider?
2. What does EDS Provider mean?
3. Have you followed this requirement?
4. Risks and data protection possibilities when using cloud-based email applications
5. Practical and Technical recommendations on using cloud-based applications
6. Cloud service providers non-marketing advice

Who should attend

Compliance Officers, ROs, MICs, Risk Management, IT and cyber team of LCs