GDPR AUDIT

Objective:

Integration in support of the DPO of the Client.

• The skills required for the assignment are included in the form to be completed. The additional questions allow us to check the suitability of your profile for the position you are looking for.
• The consultant will be expected to work independently to provide the following documentation and analysis at the end of the assignment:

Deliverable 1: Infrastructure & Network Analysis and Diagram

• Complete mapping of physical and logical interconnections (Corporate Client Network, VPN, CFWB/ETNIC Network, public charging stations).
• Accurate identification of partitioning gaps.

Deliverable 2: Security Analysis and Block Diagram

• Modeling of flow security and access management.
• Objective assessment of the level of exposure of application data.
• Analysis of the associated logging and monitoring policies.

Deliverable 3: Action and remediation plan

• Drafting of a prioritized technical roadmap allowing the Client to implement a Remediation Plan.

Background:

• As part of its activities, the Client relies on shared network infrastructures (Wallonia-Brussels Federation). In addition, since 2018 the Client has been transformed in terms of digitalization and has a digital workplace as well as external platforms.
• The Client mandates an expert consultant to carry out a technical compliance audit and map the risks to come up with a remediation plan.

Conflicts of interest

• The concept of conflict of interest refers to any situation in which, at the time of the award or performance, any person linked to a contracting authority in any way, as well as any person likely to influence the award or the outcome thereof, has directly or indirectly a financial, economic or other personal interest which could be perceived as compromising their impartiality or independence in the context of the award or performance.

The existence of a conflict of interest is in any case presumed:

• As soon as there is a relationship or alliance, in the direct line up to the third degree and, in the collateral line, up to the fourth degree, or in the case of legal cohabitation, between the natural person, and one of the candidates or tenderers or any other natural person who exercises on behalf of one of them a power of representation, decision or control;
• The natural person is, himself or through an intermediary, the owner, co-owner or active partner of one of the applicant or tendering undertakings or exercises, in law or in fact, himself or, as the case may be, through an intermediary, a power of representation, decision or control.
• A conflict of interest is considered to be any situation in which a natural person who has worked for a contracting authority as an internal collaborator, whether or not in a hierarchical relationship, as a relevant civil servant, public officer or any other person linked to a contracting authority in any way, subsequently intervenes in the context of a public contract/call for projects awarded by that contracting authority and that a link exists between the previous activities that the above-mentioned person has performed for the contracting authority and its activities in the context of the contract/call for projects. However, the application of the provision is limited to a period of two years following the resignation of the said person or any other means of terminating the previous activities.
• This provision gives the contracting authority, duly informed by the service provider, after verification of the situation, the possibility of terminating the contract/project entrusted to the service provider without compensation. During these checks, the information and justifications collected from the person concerned will be taken into account. In the event of termination, a statement of the services performed will be drawn up for payment to the service provider. In the event of an infringement (e.g. if the service provider does not disclose the conflict situation), the finding by the contracting authority may result in the nullity of the contract/project. If no justification is provided at the request of the contracting authority, the service provider will not be entitled to any payment for the services performed after the time when it should have known of the incompatibility. The contracting authority may, for the purposes of the contract/project, freely dispose of the studies, reports, etc., drawn up by the service provider in execution of the contract/project. It may also exclude it from its contracts/calls for projects for a fixed period.
• The Client's prevention measures: An awareness note is automatically communicated when the service provider file is created.