Data Protection Essentials (DPE)
Data Protection Essentials (DPE) is an IMDA programme that helps SMEs put basic data protection and security practices in place. The one-stop service and DPE logo come through IMDA-listed DPE service providers. ICFC offers training and consultation to help you prepare and to build toward the Data Protection Trustmark.
Cybersecurity, IT and Data Protection
- Standard or scheme
- IMDA
- Infocomm Media Development Authority (IMDA)
- Type
- Training and consultation only
- ICFC provides training and consultation only
- Funding
- IMDA programme, no current grant shown
- IMDA's S$1,600 grant covered implementations before 31 March 2024; eligible charities can try NCSS Tech-and-GO!
What is IMDA?
Data Protection Essentials is an IMDA programme that helps SMEs adopt basic data protection and security practices and recover quickly from data breaches.
SMEs that complete the one-stop professional service with an IMDA-listed provider and sign a minimum one-year retainer are listed by IMDA and awarded the DPE logo, subject to IMDA's terms.
Who is IMDA for?
SMEs registered and operating in Singapore with group annual sales up to S$100 million or up to 200 employees, that want a practical starting point before the DPTM.
Key details
Our role
ICFC provides training and consultation that prepares you for DPE and the DPTM. The DPE one-stop service and the DPE logo are delivered by IMDA-listed DPE service providers. For information on whether ICFC is on IMDA's DPTM consultancy reference list or is an IMDA-listed DPE service provider, please email us through the contact form.
No current IMDA grant shown - IMDA's S$1,600 grant covered implementations before 31 March 2024; eligible charities can try NCSS Tech-and-GO!
IMDA's page describes a fixed S$1,600 grant for DPE implementations completed before 31 March 2024; no current grant is shown. Eligible charities and social service agencies may apply to NCSS Tech-and-GO!. Check IMDA before you plan on funding.
Impartiality
Impartiality comes first. Every engagement begins with a conflict-of-interest check. We keep consulting and auditing roles separate, and our auditors never audit, on behalf of a certification body, an organisation that ICFC has consulted on the same scope within the period set by that body.
Our certification role
We do not certify organisations ourselves; certificates are issued by accredited certification bodies or scheme owners.
How we help
How assessment works
DPE is not an audited certification. The one-stop DPE professional service and the DPE logo are delivered through IMDA-listed DPE service providers. ICFC supports you with training and consultation.
Funding
We explain the current IMDA and NCSS routes and what each requires before you commit.
Non-grant
A fixed-scope engagement: gap assessment, documentation, implementation coaching, internal audit and management review, and support through the formal audit or assessment.
How we work
Practical, proportionate systems that your staff can run after we leave.
Classroom
Public and in-house classroom courses on Data Protection Essentials: awareness, implementation and internal auditor levels.
Online LMS
Self-paced and live-online courses on the ICFC Digital LMS, with progress tracking and certificates of completion.
Funding
Funding depends on each course's approval status, shown on the course page in the LMS.
