The Brazilian data protection authority ('ANPD') published, on 4 October 2021, an information security guide aimed to small data processing agents (controllers and/or processors). In particular, the guide aims to help small processing agents to implement information security measures for the protection of personal data processed. Furthermore, the guide provides some administrative and technical security information measures and a checklist to facilitate the visualisation of the suggestions that will be adopted, such as: 

• security information policy; 
• awareness and training; 
• contract management; 
• access control; 
• security of stored personal data; 
• communications security; 
• vulnerability management; 
• mobile devices; and 
• cloud services.

You can read the press release here, the guide here, and the checklist here, all only available in Portuguese.