Trainer Announcement – Data Protection and Cybersecurity

Terms of Reference Data Protection & Cyber Security **- 1. BACKGROUND:** An International non-governmental, and non-profit organization which has no political association working in various fields of humanitarian relief and development. was established in early 2013 and obtained licenses in multiple countries under the name| Association Internationale D’aide Humanitaire – International Humanitarian Relief Association – Uluslararasi Insani Yardimlaşma Derneği – **- 2. PURPOSE OF THE ASSIGNMENT:** The overall objective of the training to is to enhance participants’ understanding of data protection principles and cybersecurity best practices. ## Formation / Diplômes The training will help staff prevent, identify, and respond to data security incidents, ensuring that personal and organizational data are processed responsibly and securely. And to ensure compliance with international data protection standards (such as GDPR) and to strengthen the information security practices within the organization, this training aims to build staff capacity on both the ethical and technical aspects of data security. The training is part of the organization’s ongoing effort to safeguard sensitive information, protect the privacy of beneficiaries and partners, and reduce risks related to data misuse or cyberattacks. **- 3. SCOPE OF WORK** The service provider will deliver a Four-days training in data protection and cybersecurity. The training should be practical, participatory, and contextualized for NGO and humanitarian work. The topics will include but not be limited to: - Data protection and privacy. - lawful and ethical data processing. - Cyber threats. - Practical cybersecurity measures. 3.1. The training is aimed to achieve following objectives: - 1- Understand the concepts and importance of data protection and privacy. - 2- Recognize different types of personal and sensitive data in humanitarian contexts. - 3- Apply the key principles of lawful and ethical data processing. - 4- Identify cyber threats (phishing, ransomware, malware, social engineering). - 5- Implement practical cybersecurity measures for personal and organizational data. - 6- Apply secure communication, password management, and data storage practices. - 7- Respond effectively to data breaches and cybersecurity incidents. - 8- Strengthen organizational compliance with internal data protection policies **3.2....