98 | The Importance of Digital Asset Inventories in Incident Response

98 | The Importance of Digital Asset Inventories in Incident Response

This episode of the ADCG Privacy and Cybersecurity Podcast features Ken Westin, Field CISO for Panther Labs. Ken has been in the cybersecurity field for over 15 years, working with companies to improve their security posture through threat hunting, insider threat programs, and vulnerability research. We discuss how the lack of good application and data inventories impact incident response. When data is spread across data centers, clouds, and SaaS providers, it becomes difficult to track and trace an incident and understand its impact, but it becomes especially hard if the data involves confidential or proprietary business data that is not tracked by privacy officers or if it includes sensitive data that may involve regulators. The recent MOVEit breach, which involved software used to transfer sensitive data between servers, systems, and applications, provided rich lessons in the need for data asset inventories and SIEMs that can correlate data across providers and platforms.

Jaksot(107)

Daniel Solove

Daniel Solove

Daniel J. Solove is the John Marshall Harlan Research Professor of Law at the George Washington University Law School. He is also the founder of TeachPrivacy, a privacy and cybersecurity training company.  Professor Solove provided one of the inaugural podcasts of the ADCG series and discussed the current privacy landscape including the CCPA, the EU GDPR, and the EU Court of Justice decision invalidating the US Privacy Shield.  Against this backdrop, Prof. Solove discussed whether a federal privacy law is more likely now than in the past and, if so, what such a law might cover and how close it might get to the GDPR or the CCPA. In this discussion, Prof. Solove also discusses the American Law Institute (ALI) Principles of Data Privacy, which propose comprehensive privacy principles for legislation that are consistent with key foundations in the U.S. approach to privacy, but also better align the U.S. with the EU.  The Principles will likely be influential in future policy discussions, especially with respect to notice and choice.  Finally, the podcast explores with Prof. Solove potential stumbling blocks that are likely to be encountered in discussions regarding a federal privacy law.

7 Loka 202028min

Jim Dempsey

Jim Dempsey

Jim Dempsey is the Executive Director, Berkeley Center for Law and Technology and formerly held leadership roles at the Center for Democracy and Technology. Jim Dempsey provided one of the inaugural podcasts of the ADCG series and discussed the lengthy and unsuccessful attempts to enact a federal privacy law. In light of the EU GDPR, California’s passage of the CCPA, and the EU Court of Justice invalidating the US Privacy Shield, he ponders whether the U.S. needs a federal privacy law and what that might look like. The discussion covers likely stumbling blocks to a federal privacy law, such as preemption of state law and a private right of action, similar to that provided in the CCPA. As a professor of cybersecurity issues at UC Berkeley, Jim also explores the potential cybersecurity aspects of privacy legislation and the role cybersecurity requirements have played in breach notification laws.

6 Loka 202031min

Welcome to the U.S. National Privacy Legislation Podcast

Welcome to the U.S. National Privacy Legislation Podcast

This podcast will explore:What would national legislation look like?  On what principles would it be based?What are the arguments for and against a preemptive national standard?What federal agency or agencies should  be charged with implementing a national privacy law?What role would be left to the states if a national policy were to be adopted?How is congressional debate likely to unfold?What role will the executive branch play in this debate?Will the United States, where the digital economy was born, cede leadership on data protection regulation to other countries?How would a U.S. national privacy law relate to the EU General Data Protection Regulation (GDPR)?What domestic and international competitive issues are in play?All points of view, pro and con, will be heard on these podcasts.Show Notes:Visit our website for more information: adcg.orgVisit our resource page for new and other information: adcg.org/news-resources/Follow us on our social media platforms for updates:- Twitter- LinkedIn- FacebookDon't forget to review the podcast to help us reach out to other listeners. And also, do not forget to subscribe to get our next episode automatically.Thanks again for listening!

21 Syys 202025min

Suosittua kategoriassa Yhteiskunta

kolme-kaannekohtaa
i-dont-like-mondays
rss-olipa-kerran-otsikko
sita
viisaat-naiset
siita-on-vaikea-puhua
poks
ootsa-kuullut-tasta-2
joku-tietaa-jotain-2
antin-palautepalvelu
gogin-ja-janin-maailmanhistoria
aikalisa
hollywood-love-stories-2
kaksi-aitia
yopuolen-tarinoita-2
rss-murhan-anatomia
mamma-mia
free-opa
terapeuttiville-qa
rss-haudattu