RCM
To understand
Activities, data, people, tools, countries and customer engagements.
DATA PROTECTION · BY BUSINESS
Your sector changes the risks.
Your sector changes the risks.
Your evidence must follow.
RCM adapts the diagnosis, controls and deliverables to your actual processing activities, to the Moroccan framework and, when necessary, to the requirements of your European customers.
CHOOSE YOUR CONTEXT
Nine professions.
Nine professions.
Nine starting points.
Each page explains the flows, risks, controls, deliverables and limits specific to the sector, without transforming obligations to be qualified into automatic conclusions.
01 · BPO
Call centers & back office
Access to customer data, article 28, authorizations, incidents and EU-Morocco flows.
Construct the evidence → 02 · TECHESN & offshore development
Client environments, test sets, providers, security and transfers.
Secure projects → 03 · DIGITALE-commerce & marketplaces
Accounts, orders, cookies, marketing, payments and suppliers.
Map the route → 04 · HRRecruitment & payroll
Candidates, employees, CIN, health, retention and HR tools.
Supervise HR data → 05 · HEALTHClinics & care
Sensitive data, patient files, access, providers and incidents.
Protect the patient journey → 06 · TOURISMHotels & tourism
Reservations, passports, platforms, video surveillance and marketing.
Master the traveler journey → 07 · EDUCATIONSchools & Training
Minors, parents, registrations, educational tools, images and rights.
Secure journeys → 08 · IMPACTAssociations & NGOs
Members, donors, beneficiaries, campaigns and partners.
Protect the public → 09 · PRODUCTSaaS & startups
Privacy by design, DPA, hosting, processors and customer questionnaires.
Prepare for growth →
SAME METHOD · ADAPTED SCOPE
Qualify before
Qualify before
to conclude.
The applicable law, the role of each actor, the formalities, transfers and necessary measures always depend on the facts.
Qualify
Roles, bases, risks, formalities and priorities to be confirmed.
Build
Documents, controls, evidence and assigned responsibilities.
Maintain
Targeted mission or recurring management depending on the actual volume.
YOUR ACTIVITY NOT IN A CASE?
Scoping with RCM →
Let's start with your actual feeds.
A first scoping allows to identify the data, actors, countries concerned and the most useful deliverable.