-
Indirect Tax
Our experienced VAT specialists are available to assist companies and entrepreneurs of all industries and sizes in meeting their obligations.
-
Direct Tax
We can help you ensure a bespoke balance between tax compliance and effective tax planning for your special circumstances.
-
Privacy and Data Protection
Our digital risk team is made up of a combination of subject matter experts and technical specialists who can help your business comply with the GDPR.
-
Governance, Risk and Compliance (GRC)
While business goals and strategies evolve, our services support you wherever you are in your business cycle. The digital economy is simultaneously increasing the magnitude of new business opportunities while increasing the difficulty of getting it right.
-
ISO 27001 and ISO 27701
Grant Thornton’s ISO 27001 and ISO 27701 specialists will arrange and oversee the formal audit process.
-
SOC 1,2,3
As a service organization there are many ways to provide assurance to your customers and in turn other stakeholders over your control environment. One of the most effective and cost-efficient ways is to issue a Service Organization Control (SOC) Report.
-
Incident Response
Grant Thornton’s Cyber Incident Response Team can support your business in the event of a cyberattack or data loss event. We work alongside your existing IT and Legal teams to provide a co-ordinated, timely and efficient investigation and remediation.
-
Hacking Services
At Grant Thornton, our cyber security experts can develop a bespoke penetration testing plan to meet your business needs and unique IT environment. We can undertake the full suite of testing or conduct individual assessments, as required.
-
Cyber Health Check
Approximately 54% of organizations report that they have experienced at least one cyber-attack during the past year. Grant Thornton’s cyber health check provides you with an objective, jargon-free assessment of your current cyber security, drawing on both qualitative and quantitative elements.
-
Dark Web Threat Intelligence
We use a variety of dark and deep web monitoring tools that continuously scans illegal sites to discover any mention of your data, ranging from breached security credentials such as usernames and passwords to leaked confidential documents of your company.
-
Digital forensics and electronic discovery
We offer a full suite of digital forensics and data acquisition services in investigations related to cybercrime, disputes, fraud and regulatory investigations.
-
Insolvency
If you're facing a time of personal or corporate financial crisis you need advice from someone who listens, who understands your specific issues and deals with them in a supportive and sensitive manner.
-
Crisis stabilisation and turnaround
In periods of financial distress, management teams often face considerable challenges, with many directors having little or no experience of similar conditions.
-
Operational and financial restructuring
Companies challenged by underperformance often need support in identifying options for financial or operational restructuring. Tapping this type of advice helps them create a stable platform for business turnaround.
-
Accelerated M & A
Even fundamentally sound businesses run into difficulties. Cash flow can come under pressure from the loss of a big client, or a dip in performance can threaten a breach of banking covenants if there is insufficient headroom.
-
Life at Grant Thornton
At Grant Thornton Cyprus, we are taking a holistic approach and reimagining the way we work, continually assessing it and making necessary changes to better support our people.
-
In the community
Unlocking the potential for growth in our local communities.
-
Diversity and inclusion
Diversity helps us meet the demands of a changing world. We value the fact that our people come from all walks of life and that this diversity of experience and perspective makes our organisation stronger as a result.
-
Global talent mobility
One of the biggest attractions of a career with Grant Thornton Cyprus is the opportunity to work on cross-border projects all over the world.
-
Learning and development
At Grant Thornton we believe learning and development opportunities allow you to perform at your best every day.
-
Our values
We are a values-driven organisation and we have more than 56,000 people in over 140 countries who are passionately committed to these values.
Privacy and Data Protection
At its core, the General Data Protection Regulation (GDPR) is set of rules designed to give EU citizens more control over their personal data. It aims to simplify the regulatory environment for business so both citizens and businesses in the European Union can fully benefit from the digital economy. The reforms are designed to reflect the world we're living in now and brings laws and obligations - including those around personal data, privacy and consent - across Europe up to speed for the internet-connected age. At the heart of GDPR is the understanding that EU residents must be in control of their personal data. Corporations can’t store data at will and engage in invasive data tracking and collection.
What does GDPR mean for businesses?
Simply the businesses need to comply with this lengthy regulation or else are having the risks of advert consequences of failure in terms of potential fines and reputational damage. Our dedicated team are made up of a combination of subject matter experts and technical specialists who can help your business comply with the GDPR.
Our Services
DPO-as-a-Service / DPO Support Services
The Data Protection Officer (DPO) can help you demonstrate compliance and are part of the enhanced focus on accountability:
- to inform and advise you and your employees about your obligations to comply with the GDPR and other data protection laws
- to monitor compliance with the GDPR and other data protection laws, and with your data protection polices, including managing internal data protection activities; raising awareness of data protection issues, training staff and conducting internal audits
- to advise on, and to monitor, data protection impact assessments
- to cooperate with the supervisory authority
- to be the first point of contact for supervisory authorities and for individuals whose data is processed (employees, customers etc).
Read more here.
Data Protection Maturity Model
Our Data Protection Maturity Model is a quick check tool that offers a broad overview of data protection maturity across your business. The tool will reveal to you the sections where you are already GDPR compliant and in what sections where a need for action exists. Click here [ 164 kb ] to view our relevant brochure.
Privacy Transformation
In order to deliver higher qualify privacy services, our team utilizes a cloud-based solution called Enactia (By Enactia Ltd). This allows our team to better manage your privacy compliance and the overall privacy governance of your business. Enactia can help you transition into a new era. If you are currently managing your privacy tasks on spreadsheets and files, our specialists can accommodate the task of coming on board to the Enactia Platform.
GDPR GAP Analysis
Our team can deliver a comprehensive GAP analysis report where assess your business’ current position in relation to the compliance with the General Data Protection Regulation (GDPR), identify gaps to the regulatory requirements, and provide recommendations on actions that need to be undertaken.
Our responsibility is to bring to management's attention our views of priority levels and associated exposure, to comply with the General Data Protection Regulation.
Data Protection Impact Assessment (DPIA)
Data Protection Impact Assessment’s (DPIA’s) are required where your personal data processes are assessed as high risk. We carry out an assessment of the processes used for managing and storing that data, identify the risks and recommend areas for action.
Subject Rights Requests and Breach Management Services
The management of breaches and subject rights requests by your business is a critical component of data protection compliance and managing organisational risk. Organisational and departmental understanding of how to report and manage a breach is important because, in the event of a breach, proper measures should be taken to report and mitigate incidents and address contributory factors to prevent reoccurrence.
Also, understanding of how to respond adequately to rights requests is important as failure to one may expose the business to fines, claims and reputational damage.
Our team can design and run your whole processes or any part of them. From fulfilling requests and redaction through to engaging with the regulator on breaches, we cover the full breath of data protection capabilities.
Data Protection Training
From general computer based training to highly specific and tailored training delivered in an environment best suited to you. Our team designs and delivers data protection training for all levels within an organisation on many aspects of data protection.
Data Protection Program Implementation
Our team can help your business implement the GDPR requirements by a specified step-by-step procedure including among others.
- deliver a Data Protection Maturity Model as a quick check tool
- preparing for your GDPR project by performing a GDPR GAP Analysis
- offer Privacy Transformation to help you transition into a new era of data
- create and amend personal data policies and procedures
- create an inventory of processing activities
- define an approach to manage data subject rights
- define how to handle data breaches
- implement a Data Protection Impact Assessment (DPIA)
- amend third-party contracts
- ensure the security of personal and sensitive data.
