How Privacy By Design Impacts Reasonable Security

How do privacy practices impact our security programs? In this presentation, we’ll provide a structured view of privacy-by-design principles and map them to foundational reasonable security practices. The presentation will also provide a deep dive into reasonable security by IT service layer.

Learning Outcomes/Objectives

Participants in this session will come away with a deeper understanding how of privacy-by-design principles and privacy regulations impact foundational elements of our security programs. Participants will be asked a series of questions to determine if current practices would be considered reasonable, notably in the context of regulations and near-constant litigation risks.

Upon completion of this session, participants will:

1. Be able to define privacy-by-design principles and how they apply to their firm
2. Be able to defend reasonable security administration practices for their security program
3. Be able to defend reasonable security functions by IT service layer (e.g., application, database, microservices, OS, network, etc.)

Matt Stamper is a multi-time CISO with extensive experience in cybersecurity, information security, cloud
security, IT audit, risk management, privacy, and governance. Matt is a former research director and
security analyst at Gartner (NYSE:IT) and has extensive experience in cloud services and IT service
management including international experience in Latin America and China. Matt has spoken to 1000s of
CISOs and CIOs as well as other corporate leaders and boards of directors throughout his career. Matt’s
experience includes early-stage startups to large, multi-national public companies spanning multiple
industries including managed services, managed security services, global telecom, and advisory. Matt
excels at conveying complex cybersecurity and technology concepts to boards of directors, executive
management, as well as professional service providers and vendors in the cybersecurity industry.

Publications:

• CISO Desk Reference Guide: Volume 1 (Winner of the Security Canon Hall of Fame)
• CISO Desk Reference Guide: Volume 2 (Winner of the Security Canon Hall of Fame)
• CISO Desk Reference Guide: Executive Primer
• Data Privacy Program Guide: How to Build a Privacy Program that Inspires Trust\
• Vendor & Supply Chain Risk Management Program Guide – Forthcoming in 2024