Consulting services
HIT's experienced IT Consultants are at your disposal to discuss and find together the most suitable Solution for your business.
Our long history in the field of Tourism and the constant updating of our executives on current issues and international trends, enables us to provide quality consulting services to new and older hoteliers, while our many years of experience with the core of how a large catering chain operates makes us capable of acting in a consultative manner in this sector as well.
HIT Hospitality Integrated Technologies SA is one of the largest providers of Integrated IT Solutions in the Hospitality sector in Greece and Cyprus.
The company's mission is to provide high quality services to its customers at competitive prices. This includes both the search and selection of the best applications from abroad, as well as the development of innovative and customized solutions specifically for the needs of the Greek market.
With the creation of a special Department and a new consulting company specializing in the Hotel sector, HiT exelixis SA, we look to the future, with integrated control and guidance services now also towards the compliance of the computerization of the hotel units and chains with which we already collaborate.
HiT exelixis SA, with the help of independent engineers specialized in digital security and certified auditors of internationally recognized audit standards, as well as with methodologies that are products of scientific research, provides high-level auditing of information systems and networks, under the umbrella of DATA SECURITY for Hotels & Hotel Chains™ services.
The Services of the new Umbrella
Covering a wide range of services in relation to Data Security within the Hotel, the DATA SECURITY for Hotels & Hotel Chains™ service umbrella covers all stages of the compliance process of computerized hotel units, extending from the security audit of the existing network and the required training of your staff on personal data issues to the design and implementation of the business continuity plan that suits your business and the implementation of the best technical compliance measures after a cost-benefit analysis.
More specifically, we offer the following solution packages:
- PCI 3.0 DSS Compliant Data Center *
- GDPR support services
- Preparation for ISO 27001:2013
- Business Continuity Total Solution – Powered by Vodafone
We can perform:
- IT GDPR Compliance File
- Data Security Policies & Procedures
- Vulnerability Assessment
- Penetration Test (Network Vulnerability Testing)
- Data Inventory – Data Mapping
- GAP Analysis (Gap Analysis)
- Data Privacy Impact Assessment
We provide:
- Staff Training Seminars on GDPR or User Security
- Periodic or on-demand Internal Audits
- IT-on-Premise Services.
Toolkit
TOOLKIT ⬤
User Security Awareness Service
IT GDPR COMPLIANCE for Hotels & Hotel Chains
GDPR
The implementation of the IT GDPR Compliance for Hotels & Hotel Chains™ project belongs to the DATA SECURITY for Hotels & Hotel Chains™ consulting services umbrella and precisely guides each hotel unit to comply with the European Union's General Data Protection Regulation. The structure of the work modules favors the correct execution of tasks, reduces the possibility of spreading errors and facilitates the precise definition of the different processes in the fastest possible way.
The IT GDPR Security Audit and IT GDPR Compliance services are provided by experienced engineers, specialized in digital auditing and certified in digital security. The methodologies selected for the implementation of this are products of scientific research and the applications used are of modern high technology.
The GDPR Compliance Cycle begins with the mapping of the processes related to Personal Data and the diagnosis of the vulnerabilities of the Hotel's information system. At the same time, legal assistance is also required. Finally, Technical and Organizational Measures for compliance with the Regulation are proposed, which are evaluated by the Management, which decides on their implementation.
With the completion of the IT GDPR Compliance for Hotels & Hotel Chains™ project, the IT infrastructure and processes at the Hotel are made compliant with the applicable legal framework, while the points where there is a security deficit are recorded and made known. Thus, you are provided with the starting point for future improvement actions.
The delivered IT GDPR Compliance File has recorded all the GDPR-related processes related to your computerization, such as finding personal data, the detailed deletion/forgetting process, recording proof of consent of the subjects, as well as the description of the correct reaction in case of an incident. It also brings you in touch with examples of the necessary regulatory policies and related documents that you may need.
At the end of the process of compliance of the Hotel's computerized procedures, the baton is once again taken by HIT's experienced Computerization Consultants, who, in close collaboration with the Hotel Management, estimate costs for you and undertake to implement the proposals submitted in the previous stage for improving the security of your network.
As a result of the IT GDPR Compliance stage, IT infrastructures and processes are made compliant with the applicable GDPR Regulation, while any points where there is a security deficit are recorded and known – either for objective reasons or by business choice. This provides you with the starting point for future actions to improve the security of processes.
Upon completion of this project, a deliverable File is prepared with all the necessary GDPR procedures related to your computerization, such as finding personal data, the detailed deletion/forgetting process, the registration of proof of consent of the subjects, as well as the description of the reaction in the event of an incident.
IT Service GDPR Security Audit
- Audit – Recording of findings
- Reporting risks associated with findings
- Vulnerability Assessment
- Categorization of findings by risk
- Categorization of findings by restoration cost
- Recording actions for IT GDPR Compliance
External Penetration Test Service
- Port Scanning – Vulnerability Assessment – Penetration Test
- Report of findings, categorization and restoration proposals
Internal Penetration Test Service
- Vulnerability identification and assessment based on automated tools
IT GDPR Compliance Service
- Process and data flow mapping (Data Inventory – Data Mapping)
- GDPR Gap Analysis
- Data Privacy Impact Assessment Study
- Data Security Policies & Procedures
- Preparation of “IT GDPR Compliance” deliverable
GDPR 365 IT Service
Repeating the “IT GDPR Audit” – “IT GDPR Compliance” cycle to update the “IT GDPR Compliance” File whenever deemed necessary and at least once a year.
Legal Coverage Services
In the context of providing the most comprehensive Hotel Compliance Program possible with the provisions of the General Data Protection Regulation (GDPR), HiT exelixis SA consistently collaborates with an independent team of distinguished lawyers, with extensive experience and expertise in the legal framework related to Personal Data and Information Systems Law.
In the event of an existing collaboration between the Hotel or the Group and lawyers, the possibility of consulting cooperation remains.
User Security Awareness Service
The User Security Awareness Service aims to educate your staff and improve their behavior as technology users in order to reduce the chances of security incidents.
The aim is to inform about the potential risks, the impacts that security incidents may have, and mainly instructions for using computing infrastructures. Emphasis is placed on BYOD services, mail management, Internet access, password management, file & mail encryption, network-PC connectivity and file management.
The service includes the following stages:
- Analysis of existing user behavior and the way the business operates
- Two-hour seminars “GDPR Awareness & User Security in a Hotel” addressed to the Company's staff, accompanied by the delivery of printed information material to the participants and self-assessment/evaluation questionnaires of the understanding of key points and concepts of the GDPR
- Distribution of materials with instructions and advice
- Training of company managers for additional training and monitoring of users.
For a more general overview of the Regulation and the philosophy of the project IT GDPR COMPLIANCE for Hotels & Hotel Chains™, you can watch this Presentation.
If you would like to receive your own personalized Financial Offer for your Hotel's technical compliance project with the GDPR, please contact us at gdpr@hit.com.gr.
Secure data storage and retrieval
BUSINESS CONTINUITY for Hotels & Hotel Chains™
HIT, as the leading IT specialist for hotel units and chains in our country, collaborates with Vodafone and offers you an innovative package of high-quality services, the added value of which was missing from the Tourism industry, inaugurating a new series of services that come to meet the needs of the modern hotel for secure storage and retrieval of its data, processes absolutely necessary to ensure its smooth and uninterrupted operation.
All BUSINESS CONTINUITY for Hotels & Hotel Chains™ packages provide backup space on Vodafone's Cloud Server with high security standards and immediate and easy access to unlimited computing resources, combined with IT and technical support services* for the complete restoration of your hotel to smooth operation in the event of a disaster, within a guaranteed timeframe.
All BUSINESS CONTINUITY for Hotels & Hotel Chains™ packages offer:
- Innovative combination of IT service provision with high-level infrastructure
- Automatic Backup at a time set by the user
- Maximum protection during data transfer and storage
- Storage in a modern Data Center within the EU
- Security certified with ISO 27001
- Infrastructure designed based on the requirements of ADAE and APDPCH, as well as ENISA and CSA
- Exemption from infrastructure and software costs.
The Vodafone Cloud Backup structure ensures the maximum possible protection of the backup copies of the entire existing IT infrastructure of the hotel and the optimal speed of recovery of your data. In addition, HIT's IT Consultants are by your side and guarantee the correct selection of the recovery point [RPO] and the recovery time objective [RTO], the design of an appropriate recovery strategy with a cost-benefit analysis [cost-benefit analysis] and the timely restore, within the timeframe** indicated in the package you have chosen.
Recovery times are calculated based on actual hotel system recovery incident timings and backups are encrypted, so that the acquisition of each BUSINESS CONTINUITY for Hotels & Hotel Chains™ package contributes to compliance with the European General Data Protection Regulation [GDPR] (off-site Backup solution with AES 256 encryption according to FIPS 140-2 and 2048-bit SSL compression capability).
Entrust the technical part of your business continuity to the reliable structures of Vodafone's Business Cloud and to the experienced hands of HIT's IT Consultants, choosing with our help the right BUSINESS CONTINUITY for Hotels & Hotel Chains™ package for you and your hotel.
Choose us and gain access to the most modern backup solution.