Compliance FrameworksAmericas
Montserrat National ICT / Privacy Framework
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
National data-protection law: technical safeguards, records of processing software, third-party/processor accountability, and integrity controls.
| Short name | MS Privacy |
| Region | Americas |
| Country or scope | Montserrat |
| Sector | Privacy |
| In your workspace | Off until you switch it on in Compliance › Manage. |
How Safeguard covers MS Privacy
- Scan requirements: 5, all decided by a scan.
- Controls: the scan requirements below.
- Automated tests: none map to it directly. You can link any automated test to its controls yourself (how).
- Policy templates: 22 from the standard set.
How each kind of coverage works, and what the readiness score counts: Compliance frameworks.
What a scan checks
Each scan of a product checks these 5 requirements against what the scan found, including the product's software inventory (SBOM).
| Requirement | What Safeguard checks | Decided by |
|---|---|---|
MS-CONST-PRIV Processing System Inventory | Constitutional protection of privacy presumes entities can account for the systems and software processing personal information (Montserrat Constitution Order 2010, fundamental rights and freedoms) | Scan |
MS-OECS-SEC Security of Processing | The regional model framework Montserrat is expected to adopt requires appropriate technical measures protecting personal data against loss and unlawful alteration, including software integrity verification (OECS model Data Protection Bill, security-of-processing obligation) | Scan |
MS-OECS-3P Third-Party Processing Accountability | Controllers remain accountable for processing done on their behalf by third parties, requiring supplier visibility for third-party software components (OECS model Data Protection Bill, processor obligations) | Scan |
MS-ID-READY Incident Impact Readiness | Assessing the privacy impact of a security incident requires the ability to identify precisely which components hold or process personal information (Montserrat privacy framework, incident-readiness expectation) | Scan |
MS-DOC Documented Data-Handling Systems | Accountability for personal information handled by government and business presumes identifiable, timestamped documentation of the processing systems (Montserrat privacy framework, accountability expectation) | Scan |
Policy templates
All 22 from the standard set, adapted to MS Privacy.