GDPR and SMCR: How prepared are you?

A Credit Strategy survey in association with Crowe Horwath LLP (risk and compliance consultancy)

Your answers to this survey will remain individually confidential, though Credit Strategy will publish aggregated findings from the survey in the September issue.

The survey consists of just eight multiple choice questions and once completed, your name will go into a draw for a free Echo Dot – a hands-free, voice-controlled device that controls smart home devices such as thermostats, plays music and acts as an alarm clock (as well as other handy uses). You’ll also be sent a free copy of the September issue of Credit Strategy magazine, in which the survey results appear.

Here are the questions:

Question Title

1. How would you describe your level of awareness of the potential risks posed to your business/division by the Senior Managers and Certification Regime, which comes into force for all financial services firms in 2018?

No awareness

Little awareness and no expertise

Good awareness

Full awareness

Question Title

2. How would you describe your business/division’s level of preparedness to deliver the regime’s requirements?

Not prepared at all

Little preparation with a long way to go

Well prepared

Completely prepared

Question Title

3. For the SMCR, have you created any of the following?

	YES	NO
A governance map	A governance map YES	A governance map NO
A system for documenting decision-making in meetings with an audit trail	A system for documenting decision-making in meetings with an audit trail YES	A system for documenting decision-making in meetings with an audit trail NO
Clear job profiles with distinct, explicit responsibilities set out for job titles such as CTO, COO, CIO, CRO, DPO and CISO	Clear job profiles with distinct, explicit responsibilities set out for job titles such as CTO, COO, CIO, CRO, DPO and CISO YES	Clear job profiles with distinct, explicit responsibilities set out for job titles such as CTO, COO, CIO, CRO, DPO and CISO NO
A system for setting and monitoring the “tone from the top” in your business/division with training/education on conduct roles and responsibilities for all senior managers	A system for setting and monitoring the “tone from the top” in your business/division with training/education on conduct roles and responsibilities for all senior managers YES	A system for setting and monitoring the “tone from the top” in your business/division with training/education on conduct roles and responsibilities for all senior managers NO