How Does Big Data Change Your Way of Managing Information?

Size: px
Start display at page:

Download "How Does Big Data Change Your Way of Managing Information?"

Transcription

1 How Does Big Data Change Your Way of Managing Information? A Best-Practices Guide for Data Managers By Erian Laperi, Director Enterprise Data Management and Business Enablement at AT&T

2 How Does Big Data Change Your Way of Managing Information? Table of Contents First Step: Get Started!... 2 Second Step: Foster a Commitment to Privacy... 6 Third Step: Protect Your Data... 7 The Final Step: Is Your Program Creating Value?... 9 The age of Big Data is upon us. Storage costs are going down, and data analytics is becoming more capable and more user-friendly. Even your auto mechanic will be storing a petabyte of data soon. Big Data will give businesses new insights and help improve operations. With these new tools come questions about how to use them. But your mechanic knows more about fixing a transmission than developing a Hadoop cluster, and similar concerns hold true for larger enterprises. Businesses everywhere are looking for guidance. 1

3 What should organizations do with all this data? What guidelines should they follow in order to: Best manage their data and preserve its value Foster a commitment to privacy Protect the security of their data The right answers never come without asking the right questions. In this article, we offer some thoughts on our continual-improvement program, called AT&T Data Excellence. We don t have all the answers and we aren t perfect. But based on years of experience managing vast amounts of data, we hope we have some helpful guidance to offer your business. We recognize that there is no one-size-fits-all solution to data use, management, and protection. It will depend on your organization, your data, and your data uses. This paper presents thoughts on the types of practices and procedures to consider. First Step: Get Started! Data is valuable, and we should treat it that way. Take a holistic approach to managing it. This should include protection of data, attention to its quality, 2

4 compliance with applicable regulations and privacy guidelines, and rules for access and usage. Appoint a Chief Data Officer, or someone who can serve in that capacity. We love our Information Technology (IT) team, but IT is not the only organization that represents a complete, comprehensive picture of data. Data is also about privacy, policy and compliance, business strategy, marketing, customer service pretty much every corner of the business. Consider dividing up data and IT organizations with clear lines of responsibility. IT is responsible for the information systems, while the Chief Data Office is responsible for managing data as a corporate asset through its lifecycle, including making business decisions regarding what types of data is collected, the purpose of use, data retention, disclosure, onward transfer, and finally data disposal. Understand your data assets. Data is no longer a storage problem, but is now also a means to create insight to improve your operations and services. Treat data as a valuable asset measure its cost and value, even if in a pro forma balance sheet. You can t manage what you don t measure. Establish a data quality program. If you think this is a lot of work or it costs too much, think again! You can t afford the price tag of rework. Create data management processes that care for all aspects of data management, guided 3

5 by Six Sigma Quality by Design if possible, while at the same time encouraging innovation and enabling new business capabilities. Define data stewardship responsibilities. In the life of data, three phases matter: (1) creation, (2) storage and use, and (3) destruction or onward transfer. It is the IT department s responsibility to connect the three. But it is the business unit s and user s responsibility to determine why, how and when this happens. Identify which data is strategic. Create a data inventory grid. This is a company-wide reference guide for who is responsible for the data, where it resides, how it moves, how it s related to business needs and other data, and who has access to it. To create a sustainable model, eventually you would want to create or move towards automating the elements of the data inventory grid. Investigate how the data is stored. Security is an important aspect and it begins with a thorough assessment. How secure is your data? Is it encrypted? Is it de-identified? How many backups are there? Are you following standard industry practices? Integrate data and records management functions. If your company already has data and records management functions, are they talking to each other? 4

6 Make an assessment of what tools and frameworks they use. Are there any repositories of metadata or data definitions? Those may be very valuable, and in need of corporate support. Identify data champions in each of your business units. Data champions will help you promote concepts of data governance, with passion. Data champions can also help you create a network of responsible data stewards in support of each business function that creates or uses data. Stewardship is the operational aspect of data management, where the day-to-day work gets done. Find the experts you already have. You may already have data management expertise in your enterprise architecture group, enterprise application integration team, or your data warehousing group. Your business process analysts or your senior business-oriented database administrators may also have good data management experience (while some of your most technical database admins may not have a good understanding of corporate data concerns). Start small, on the most important data. Perfect your process and then expand your program across the enterprise. Data Management is not a project it is a program and a continuing journey. 5

7 Second Step: Foster a Commitment to Privacy The advent of Big Data raises additional issues with respect to preservation of customer trust. As businesses rush to derive value from their data, they risk compromising the trust that people put in their brand, their products and their services. Establishing the necessary safeguards to promote customer trust in your privacy commitment isn t just for complying with privacy policies and legal and regulatory guidelines. It s also common business sense. If you take customers interests to heart by embracing data privacy principles, such as transparency and data accuracy, that will go a long way in gaining and keeping customer trust. You should incorporate data privacy and security into the front end of any new product, service or internal procedure not merely as an afterthought or the final item in an approval process. Promote and encourage a culture of transparency about your data and its usage. As with all emerging disciplines and all learning by doing, it is important to disclose and take reasonable remedial measures when mistakes or new empirical evidence is discovered. 6

8 Third Step: Protect Your Data Cyber threats are real, sophisticated, and constantly evolving. So how can companies navigate in such an environment? Although the safest computing medium is one that is turned off, business models can be built with safeguards to help minimize security risks. Most organizations have principles and practices for protecting their tangible assets, along with some version of business and conduct guidelines. This should extend to data assets. It is important to clearly communicate, and constantly reinforce, the organization s commitment to data assets. Explain why each employee has the duty to protect and preserve them. Here are some practices and data protection principles to consider. Understanding and embracing these can help you protect your business models and lead with competitive advantage. Assess your organization s state of readiness, threats and vulnerabilities, and raise internal awareness. Security is an important aspect and it begins with a thorough assessment. How secure is your data? Is it encrypted? Is it deidentified? How many backups are there? Techniques and risks will vary depending on the data you have and your business model. 7

9 Protect your data from unauthorized disclosure. Think least privilege and set up programs to oversee risks. Be aware of organized crime recruiting people in call centers, maintenance, finance and IT. Trust, verify and look for wolves in sheep s clothing. Forrester Research, Inc. s Q Forrsights Security Survey looked at 512 North American and European enterprise and SMB IT security decision-makers whose organizations had a data breach in the preceding 12 months. Two of the most common ways in which the breaches occurred were inadvertent misuse by insider (36%) and abuse by malicious insider (25%) 1. Manage 3 rd parties with access to your data. Think about the 3 rd parties with whom you share data, and think through how to assess their privacy practices as well. Be sure to understand and control what data is shared with them. Include controls in your contracts. Implement attribute-based access controls. Think of what unique, controllable attributes can be assigned to each element of your strategic data. Consider the possibility of transitioning your critical systems and applications from Role-Based Access Controls (RBAC) to Attribute-Based Access Controls (ABAC). Your business model will drive what attributes you 1 Source: Forrester Research Understand The State Of Data Security And Privacy: 2013 To

10 select for your data. In ABAC, access to granular data elements is only granted to particular individuals for a specific business need, time period and access method. Develop a breach management process. Realize that it s probably not a matter of if, but when, a breach will happen. It is unlikely that you can prevent every one, just like it is almost impossible to prevent hardware failure. But you can plan for contingency and redundancy. The key is how you respond. Develop a plan and run it through tabletop exercise drills. Don t focus exclusively on short-term costs. In the long term, data protection, privacy and security are enablers of future business strategies and opportunities. The Final Step: Is Your Program Creating Value? Rear Admiral Grace Murray Hopper said: Someday, on the corporate balance sheet, there will be an entry which reads, Information ; for in most cases, the information is more valuable than the hardware which processes it. If you love data and you are involved in information management as part of your official job duties, then you certainly understand that data is an asset and that it 9

11 has a tremendous value. But what about everyone else? How do they fit in the overall data governance picture, and why is this important to them? Tell them this: Whether we realize it or not, today we are all potentially data consumers, managers and custodians. Consider the functions you perform on your smartphone on a daily basis. You are not a developer, but you are creating data, consuming it, and updating and customizing software (your apps). You are making decisions based on data that you and the overall ecosystem of users and devices created, such as what route to take to the airport and how long it will take to get there. Thus anyone can see that data often has real value to you and to your company as well. When launching and reviewing data governance programs, ask the simple question: What value is it creating for my organization and customers in terms of efficiencies, of hard dollars (economic value and customer trust), or of the avoidance of liability, risk and cost? The right answers never come without asking the right questions, and great things do not always come easy. Remember that data governance is a continuing journey. And every journey starts with that first step. We hope that this helps 10

12 you in your quest for a framework to launch and build your data governance program. 2 2 Data practices are governed by a wide variety of laws and regulations, which vary across state and national jurisdictions and data sets. This paper is intended to provide AT&T s experiences for readers to consider as they undertake development of their own data practices. It is not intended to provide legal or regulatory guidance as to compliance measures that a reader may be required to consider or implement. Legal counsel is an important step in developing and implementing your own compliant data practices. 11

www.pwc.co.uk Cyber security Building confidence in your digital future

www.pwc.co.uk Cyber security Building confidence in your digital future www.pwc.co.uk Cyber security Building confidence in your digital future November 2013 Contents 1 Confidence in your digital future 2 Our point of view 3 Building confidence 4 Our services Confidence in

More information

Information Security Handbook

Information Security Handbook Information Security Handbook Adopted 6/4/14 Page 0 Page 1 1. Introduction... 5 1.1. Executive Summary... 5 1.2. Governance... 5 1.3. Scope and Application... 5 1.4. Biennial Review... 5 2. Definitions...

More information

Preemptive security solutions for healthcare

Preemptive security solutions for healthcare Helping to secure critical healthcare infrastructure from internal and external IT threats, ensuring business continuity and supporting compliance requirements. Preemptive security solutions for healthcare

More information

Big Data, Big Risk, Big Rewards. Hussein Syed

Big Data, Big Risk, Big Rewards. Hussein Syed Big Data, Big Risk, Big Rewards Hussein Syed Discussion Topics Information Security in healthcare Cyber Security Big Data Security Security and Privacy concerns Security and Privacy Governance Big Data

More information

Rowan University Data Governance Policy

Rowan University Data Governance Policy Rowan University Data Governance Policy Effective: January 2014 Table of Contents 1. Introduction... 3 2. Regulations, Statutes, and Policies... 4 3. Policy Scope... 4 4. Governance Roles... 6 4.1. Data

More information

Why Email Encryption is Essential to the Safety of Your Business

Why Email Encryption is Essential to the Safety of Your Business Why Email Encryption is Essential to the Safety of Your Business What We ll Cover Email is Like a Postcard o The Cost of Unsecured Email 5 Steps to Implement Email Encryption o Know Your Compliance Regulations

More information

How-To Guide: Cyber Security. Content Provided by

How-To Guide: Cyber Security. Content Provided by How-To Guide: Cyber Security Content Provided by Who needs cyber security? Businesses that have, use, or support computers, smartphones, email, websites, social media, or cloudbased services. Businesses

More information

IBM InfoSphere Guardium Data Activity Monitor for Hadoop-based systems

IBM InfoSphere Guardium Data Activity Monitor for Hadoop-based systems IBM InfoSphere Guardium Data Activity Monitor for Hadoop-based systems Proactively address regulatory compliance requirements and protect sensitive data in real time Highlights Monitor and audit data activity

More information

Leveraging innovative security solutions for government. Helping to protect government IT infrastructure, meet compliance demands and reduce costs

Leveraging innovative security solutions for government. Helping to protect government IT infrastructure, meet compliance demands and reduce costs IBM Global Technology Services Leveraging innovative security solutions for government. Helping to protect government IT infrastructure, meet compliance demands and reduce costs Achieving a secure government

More information

Prepared by the Office of the Executive Vice President for Academic Affairs/Provost This is a NEW Executive Policy UNIVERSITY OF HAWAI I

Prepared by the Office of the Executive Vice President for Academic Affairs/Provost This is a NEW Executive Policy UNIVERSITY OF HAWAI I Prepared by the Office of the Executive Vice President for Academic Affairs/Provost This is a NEW Executive Policy UNIVERSITY OF HAWAI I EXECUTIVE POLICY ON INSTITUTIONAL DATA GOVERNANCE September 2012

More information

security policy Purpose The purpose of this paper is to outline the steps required for developing and maintaining a corporate security policy.

security policy Purpose The purpose of this paper is to outline the steps required for developing and maintaining a corporate security policy. Abstract This paper addresses the methods and methodologies required to develop a corporate security policy that will effectively protect a company's assets. Date: January 1, 2000 Authors: J.D. Smith,

More information

R345, Information Technology Resource Security 1

R345, Information Technology Resource Security 1 R345, Information Technology Resource Security 1 R345-1. Purpose: To provide policy to secure the private sensitive information of faculty, staff, patients, students, and others affiliated with USHE institutions,

More information

1. Understanding Big Data

1. Understanding Big Data Big Data and its Real Impact on Your Security & Privacy Framework: A Pragmatic Overview Erik Luysterborg Partner, Deloitte EMEA Data Protection & Privacy leader Prague, SCCE, March 22 nd 2016 1. 2016 Deloitte

More information

Why the Fuss over Encrypting Email? Empowering People and Business through Technology SMALL AND MEDIUM BUSINESS TECHNOLOGY STRATEGIES

Why the Fuss over Encrypting Email? Empowering People and Business through Technology SMALL AND MEDIUM BUSINESS TECHNOLOGY STRATEGIES Empowering People and Business through Technology SMALL AND MEDIUM BUSINESS TECHNOLOGY STRATEGIES Why the Fuss over Encrypting Email? Presented By: TS Technology Revised May 2014 Statement of Confidentiality

More information

Data Loss Prevention Program

Data Loss Prevention Program Data Loss Prevention Program Safeguarding Intellectual Property Author: Powell Hamilton Senior Managing Consultant Foundstone Professional Services One of the major challenges for today s IT security professional

More information

5 FAM 630 DATA MANAGEMENT POLICY

5 FAM 630 DATA MANAGEMENT POLICY 5 FAM 630 DATA MANAGEMENT POLICY (Office of Origin: IRM/BMP/OCA/GPC) 5 FAM 631 GENERAL POLICIES a. Data management incorporates the full spectrum of activities involved in handling data, including its

More information

FINAL May 2005. Guideline on Security Systems for Safeguarding Customer Information

FINAL May 2005. Guideline on Security Systems for Safeguarding Customer Information FINAL May 2005 Guideline on Security Systems for Safeguarding Customer Information Table of Contents 1 Introduction 1 1.1 Purpose of Guideline 1 2 Definitions 2 3 Internal Controls and Procedures 2 3.1

More information

Information Technology Asset Management: Control and Compliance

Information Technology Asset Management: Control and Compliance Information Technology Asset Management: Control and Compliance Information Technology Asset Management is the oversight and management of an organizations IT assets hardware, software and associated service

More information

Synapse Privacy Policy

Synapse Privacy Policy Synapse Privacy Policy Last updated: April 10, 2014 Introduction Sage Bionetworks is driving a systems change in data-intensive healthcare research by enabling a collective approach to information sharing

More information

How to avoid building a data swamp

How to avoid building a data swamp How to avoid building a data swamp Case studies in Hadoop data management and governance Mark Donsky, Product Management, Cloudera Naren Korenu, Engineering, Cloudera 1 Abstract DELETE How can you make

More information

University of Hawai i Executive Policy on Data Governance (Draft 2/1/12)

University of Hawai i Executive Policy on Data Governance (Draft 2/1/12) University of Hawai i Executive Policy on Data Governance (Draft 2/1/12) I. Definition Data governance is the exercise of authority and control (planning, monitoring, and enforcement) over the management

More information

A Best Practice Guide

A Best Practice Guide A Best Practice Guide Contents Introduction [2] The Benefits of Implementing a Privacy Management Programme [3] Developing a Comprehensive Privacy Management Programme [3] Part A Baseline Fundamentals

More information

HIPAA: MANAGING ACCESS TO SYSTEMS STORING ephi WITH SECRET SERVER

HIPAA: MANAGING ACCESS TO SYSTEMS STORING ephi WITH SECRET SERVER HIPAA: MANAGING ACCESS TO SYSTEMS STORING ephi WITH SECRET SERVER With technology everywhere we look, the technical safeguards required by HIPAA are extremely important in ensuring that our information

More information

Achieving Regulatory Compliance through Security Information Management

Achieving Regulatory Compliance through Security Information Management www.netforensics.com NETFORENSICS WHITE PAPER Achieving Regulatory Compliance through Security Information Management Contents Executive Summary The Compliance Challenge Common Requirements of Regulations

More information

Generally Accepted Recordkeeping Principles

Generally Accepted Recordkeeping Principles Generally Accepted Recordkeeping Principles Information Governance Maturity Model Information is one of the most vital strategic assets any organization possesses. Organizations depend on information to

More information

Web application security Executive brief Managing a growing threat: an executive s guide to Web application security.

Web application security Executive brief Managing a growing threat: an executive s guide to Web application security. Web application security Executive brief Managing a growing threat: an executive s guide to Web application security. Danny Allan, strategic research analyst, IBM Software Group Contents 2 Introduction

More information

Data Security and Privacy Principles for IBM SaaS How IBM Software as a Service is protected by IBM s security-driven culture

Data Security and Privacy Principles for IBM SaaS How IBM Software as a Service is protected by IBM s security-driven culture Data Security and Privacy Principles for IBM SaaS How IBM Software as a Service is protected by IBM s security-driven culture 2 Data Security and Privacy Principles for IBM SaaS Contents 2 Introduction

More information

Washington State s Use of the IBM Data Governance Unified Process Best Practices

Washington State s Use of the IBM Data Governance Unified Process Best Practices STATS-DC 2012 Data Conference July 12, 2012 Washington State s Use of the IBM Data Governance Unified Process Best Practices Bill Huennekens Washington State Office of Superintendent of Public Instruction,

More information

An Executive Overview of GAPP. Generally Accepted Privacy Principles

An Executive Overview of GAPP. Generally Accepted Privacy Principles An Executive Overview of GAPP Generally Accepted Privacy Principles Current Environment One of today s key business imperatives is maintaining the privacy of your customers personal information. As business

More information

This Policy is issued by the Sector Head responsible for Records Management.

This Policy is issued by the Sector Head responsible for Records Management. Records Management Policy Effective Date: This Policy takes effect on July 15, 2013 Purpose The purpose of this policy is to achieve efficient and effective management of CMHC information with business

More information

Addendum Windows Azure Data Processing Agreement Amendment ID M129

<Choose> Addendum Windows Azure Data Processing Agreement Amendment ID M129 Addendum Amendment ID Proposal ID Enrollment number Microsoft to complete This addendum ( Windows Azure Addendum ) is entered into between the parties identified on the signature form for the

More information

Data Governance Policy. Version 2.0 19 October 2015

Data Governance Policy. Version 2.0 19 October 2015 Version 2.0 19 October 2015 Document Title: Summary: Date of Issue: Status: Contact Officer: Applies To: References: This policy provides the Cancer Institute NSW with an instrument to formally manage

More information

Executive Management of Information Security

Executive Management of Information Security WHITE PAPER Executive Management of Information Security _experience the commitment Entire contents 2004, 2010 by CGI Group Inc. All rights reserved. Reproduction of this publication in any form without

More information

DEVELOPING A CYBERSECURITY POLICY ARCHITECTURE

DEVELOPING A CYBERSECURITY POLICY ARCHITECTURE TECHNICAL PROPOSAL DEVELOPING A CYBERSECURITY POLICY ARCHITECTURE A White Paper Sandy Bacik, CISSP, CISM, ISSMP, CGEIT July 2011 7/8/2011 II355868IRK ii Study of the Integration Cost of Wind and Solar

More information

Datacenter Hosting. Scalable Technology and Insurance for Your Business. nsacom.com

Datacenter Hosting. Scalable Technology and Insurance for Your Business. nsacom.com Datacenter Hosting Scalable Technology and Insurance for Your Business nsacom.com Datacenter Hosting Scalable Technology and Insurance for Your Business Datacenter Hosting Gives You the Best of Both Worlds

More information

Information Security Policy September 2009 Newman University IT Services. Information Security Policy

Information Security Policy September 2009 Newman University IT Services. Information Security Policy Contents 1. Statement 1.1 Introduction 1.2 Objectives 1.3 Scope and Policy Structure 1.4 Risk Assessment and Management 1.5 Responsibilities for Information Security 2. Compliance 3. HR Security 3.1 Terms

More information

www.pwc.com The data breach lifecycle: From prevention to response IAPP global privacy summit March 6, 2014 (4:30-5:30) Draft v8 2-25-14

www.pwc.com The data breach lifecycle: From prevention to response IAPP global privacy summit March 6, 2014 (4:30-5:30) Draft v8 2-25-14 www.pwc.com The data breach lifecycle: From prevention to response IAPP global privacy summit (4:30-5:30) Draft v8 2-25-14 Common Myths 1. You have not been hacked. 2. Cyber security is about keeping the

More information

08/10/2013. Data protection and compliance. Agenda. Data protection life cycle and goals. Introduction. Data protection overview

08/10/2013. Data protection and compliance. Agenda. Data protection life cycle and goals. Introduction. Data protection overview Data protection and compliance In the cloud and in your data center 1 November 2013 Agenda 1 Introduction 2 Data protection overview 3 Understanding the cloud 4 Where do I start? 5 Wrap-up Page 2 Data

More information

Data Governance Policy

Data Governance Policy Data Governance Policy Table of Contents STATEMENT OF PURPOSE... 2 ENTITIES AFFECTED BY THIS POLICY... 3 WHO SHOULD READ THIS POLICY... 3 POLICY STRUCTURE... 3 POLICY... 3 1. Data Governance Structure...

More information

NEES@Buffalo Cybersecurity Plan. Introduction. Roles and Responsibilities. Laboratory Executive Commitee (ExCom)

NEES@Buffalo Cybersecurity Plan. Introduction. Roles and Responsibilities. Laboratory Executive Commitee (ExCom) NEES@Buffalo Cybersecurity Plan Introduction The NEES Cyberinfrastructure (CI) system is composed of fourteen equipment sites and one central IT facility, henceforth referred to as NEEScomm IT. With IT

More information

Agio Remote Monitoring and Management

Agio Remote Monitoring and Management Remote Monitoring and Management s Remote Monitoring & Management is a 24x7x365 service in which we proactively manage your infrastructure and IT environment to make sure it s in a healthy state and stays

More information

Certified Identity and Access Manager (CIAM) Overview & Curriculum

Certified Identity and Access Manager (CIAM) Overview & Curriculum Identity and access management (IAM) is the most important discipline of the information security field. It is the foundation of any information security program and one of the information security management

More information

9/11 Heroes Stamp Act of 2001 File System

9/11 Heroes Stamp Act of 2001 File System for the 9/11 Heroes Stamp Act of 2001 File System Contact Point Elizabeth Edge US Fire Administration Federal Emergency Management Agency (202) 646-3675 Reviewing Official Nuala O Connor Kelly Chief Privacy

More information

Embarcadero DataU Conference. Data Governance. Francis McWilliams. Solutions Architect. Master Your Data

Embarcadero DataU Conference. Data Governance. Francis McWilliams. Solutions Architect. Master Your Data Data Governance Francis McWilliams Solutions Architect Master Your Data A Level Set Data Governance Some definitions... Business and IT leaders making strategic decisions regarding an enterprise s data

More information

Data Growth Presents Challenges And Opportunities

Data Growth Presents Challenges And Opportunities A Custom Technology Adoption Profile Commissioned By AT&T August 2012 Introduction Today s CIO faces many challenges. Businesses are craving data as they look to remain competitive, and scour external

More information

Enterprise Data Protection

Enterprise Data Protection PGP White Paper June 2007 Enterprise Data Protection Version 1.0 PGP White Paper Enterprise Data Protection 2 Table of Contents EXECUTIVE SUMMARY...3 PROTECTING DATA EVERYWHERE IT GOES...4 THE EVOLUTION

More information

HIPAA CRITICAL AREAS TECHNICAL SECURITY FOCUS FOR CLOUD DEPLOYMENT

HIPAA CRITICAL AREAS TECHNICAL SECURITY FOCUS FOR CLOUD DEPLOYMENT HIPAA CRITICAL AREAS TECHNICAL SECURITY FOCUS FOR CLOUD DEPLOYMENT A Review List This paper was put together with Security in mind, ISO, and HIPAA, for guidance as you move into a cloud deployment Dr.

More information

BEST PRACTICES IN MARKETING DATA GOVERNANCE

BEST PRACTICES IN MARKETING DATA GOVERNANCE BEST PRACTICES IN MARKETING DATA GOVERNANCE CMA Customer Insights & Analytics Council Paul Tyndall Council Chair and Director, Client Knowledge & Insights RBC Royal Bank Alexis Zamkow General Manager Data

More information

Services. Cybersecurity. Capgemini & Sogeti. Guiding enterprises and government through digital transformation while keeping them secure

Services. Cybersecurity. Capgemini & Sogeti. Guiding enterprises and government through digital transformation while keeping them secure Home Secure digital transformation SMACT Advise, Protect & Monitor Why Capgemini & Sogeti? In safe hands Capgemini & Sogeti Cybersecurity Services Guiding enterprises and government through digital transformation

More information

2/9/2012. The Third International Conference on Technical and Legal Aspects of the e-society CYBERLAWS 2012

2/9/2012. The Third International Conference on Technical and Legal Aspects of the e-society CYBERLAWS 2012 The Third International Conference on Technical and Legal Aspects of the e-society CYBERLAWS 2012 Legal Issues Involved in Creating Security Compliance Plans W. David Snead Attorney + Counselor Washington,

More information

Planning for Success: Privacy Impact Assessment Guide

Planning for Success: Privacy Impact Assessment Guide Planning for Success: Privacy Impact Assessment Guide Acknowledgement This guide is partially based on the Privacy Impact Assessment Guides and Tools developed by the Ministry of Government and Consumer

More information

LEEDS BECKETT UNIVERSITY. Information Security Policy. 1.0 Introduction

LEEDS BECKETT UNIVERSITY. Information Security Policy. 1.0 Introduction LEEDS BECKETT UNIVERSITY Information Security Policy 1.0 Introduction 1.1 Information in all of its forms is crucial to the effective functioning and good governance of our University. We are committed

More information

FISH AND WILDLIFE SERVICE INFORMATION RESOURCES MANAGEMENT. Chapter 7 Information Technology (IT) Security Program 270 FW 7 TABLE OF CONTENTS

FISH AND WILDLIFE SERVICE INFORMATION RESOURCES MANAGEMENT. Chapter 7 Information Technology (IT) Security Program 270 FW 7 TABLE OF CONTENTS TABLE OF CONTENTS General Topics Purpose and Authorities Roles and Responsibilities Policy and Program Waiver Process Contact Abbreviated Sections/Questions 7.1 What is the purpose of this chapter? 7.2

More information

3rd Party Assurance & Information Governance 2014-2016 outlook IIA Ireland Annual Conference 2014. Straightforward Security and Compliance

3rd Party Assurance & Information Governance 2014-2016 outlook IIA Ireland Annual Conference 2014. Straightforward Security and Compliance 3rd Party Assurance & Information Governance 2014-2016 outlook IIA Ireland Annual Conference 2014 Continuous Education Services (elearning/workshops) Compliance Management Portals Information Security

More information

A Websense Research Brief Prevent Data Loss and Comply with Payment Card Industry Data Security Standards

A Websense Research Brief Prevent Data Loss and Comply with Payment Card Industry Data Security Standards A Websense Research Brief Prevent Loss and Comply with Payment Card Industry Security Standards Prevent Loss and Comply with Payment Card Industry Security Standards Standards for Credit Card Security

More information

SIEM 2.0: AN IANS INTERACTIVE PHONE CONFERENCE INTEGRATING FIVE KEY REQUIREMENTS MISSING IN 1ST GEN SOLUTIONS SUMMARY OF FINDINGS

SIEM 2.0: AN IANS INTERACTIVE PHONE CONFERENCE INTEGRATING FIVE KEY REQUIREMENTS MISSING IN 1ST GEN SOLUTIONS SUMMARY OF FINDINGS SIEM 2.0: INTEGRATING FIVE KEY REQUIREMENTS MISSING IN 1ST GEN SOLUTIONS AN IANS INTERACTIVE PHONE CONFERENCE SUMMARY OF FINDINGS OCTOBER 2009 Chris Peterson, LogRhythm CTO, Founder Chris brings a unique

More information

The X-Factor in Data-Centric Security. Webinar, Tuesday July 14 th 2015

The X-Factor in Data-Centric Security. Webinar, Tuesday July 14 th 2015 The X-Factor in Data-Centric Security Webinar, Tuesday July 14 th 2015 *The Insider Threat SpotlIght Report Tuesday July 14th 2015 WEBINAR: The X-Factor in Data" 2 Agenda Introductions & House Rules A

More information

4.10 Information Management Policy

4.10 Information Management Policy Policy Statement Information is a strategic business resource that the must manage as a public trust on behalf of Nova Scotians. Effective information management makes program and service delivery more

More information

The Second National HIPAA Summit

The Second National HIPAA Summit HIPAA Security Regulations: Documentation and Procedures The Second National HIPAA Summit Healthcare Computing Strategies, Inc. John Parmigiani Practice Director, Compliance Programs Tom Walsh, CISSP Practice

More information

IDENTITY & ACCESS. Privileged Identity Management. controlling access without compromising convenience

IDENTITY & ACCESS. Privileged Identity Management. controlling access without compromising convenience IDENTITY & ACCESS Privileged Identity Management controlling access without compromising convenience Introduction According to a recent Ponemon Institute study, mistakes made by people Privilege abuse

More information

Seven Things To Consider When Evaluating Privileged Account Security Solutions

Seven Things To Consider When Evaluating Privileged Account Security Solutions Seven Things To Consider When Evaluating Privileged Account Security Solutions Contents Introduction 1 Seven questions to ask every privileged account security provider 4 1. Is the solution really secure?

More information

Stay ahead of insiderthreats with predictive,intelligent security

Stay ahead of insiderthreats with predictive,intelligent security Stay ahead of insiderthreats with predictive,intelligent security Sarah Cucuz sarah.cucuz@spyders.ca IBM Security White Paper Executive Summary Stay ahead of insider threats with predictive, intelligent

More information

Building a Roadmap to Robust Identity and Access Management

Building a Roadmap to Robust Identity and Access Management Building a Roadmap to Robust Identity and Access Management Elevating IAM from Responsive to Proactive From cases involving private retailers to government agencies, instances of organizations failing

More information

Qlik Sense Enabling the New Enterprise

Qlik Sense Enabling the New Enterprise Technical Brief Qlik Sense Enabling the New Enterprise Generations of Business Intelligence The evolution of the BI market can be described as a series of disruptions. Each change occurred when a technology

More information

Office 365 Data Processing Agreement with Model Clauses

Office 365 Data Processing Agreement with Model Clauses Enrollment for Education Solutions Office 365 Data Processing Agreement (with EU Standard Contractual Clauses) Amendment ID Enrollment for Education Solutions number Microsoft to complete 7392924 GOLDS03081

More information

Sample Information Security Policies

Sample Information Security Policies Sample Information Security Policies Sample Information Security Policies May 31, 2011 1 13740 Research Blvd Suite 2, Building T Austin, TX 78750 512.351.3700 www.aboundresources.com Boston Austin Atlanta

More information

Data Governance Policy. Staff Only Students Only Staff and Students. Vice-Chancellor

Data Governance Policy. Staff Only Students Only Staff and Students. Vice-Chancellor Name of Policy Description of Policy Policy applies to Data Governance Policy To establish proper standards to assure the quality and integrity of University data. This policy also defines the roles and

More information

Introduction 3. What is a Privacy Breach? 3. Authority to Review Privacy Breaches 5. Survey Highlights 6. Survey Results 8

Introduction 3. What is a Privacy Breach? 3. Authority to Review Privacy Breaches 5. Survey Highlights 6. Survey Results 8 Table of Contents Introduction 3 What is a Privacy Breach? 3 Authority to Review Privacy Breaches 5 Survey Highlights 6 Survey Results 8 Response Rate 8 Personal and Personal Health Information 9 Privacy

More information

Proofpoint Enterprise Archive for SEC and FINRA Compliance

Proofpoint Enterprise Archive for SEC and FINRA Compliance Proofpoint Enterprise Archive for SEC and FINRA Compliance The Leading Cloud Solution Designed for Broker-Dealers and Investment Advisors Proofpoint provides the most powerful, cost-effective solution

More information

Test Data Management for Security and Compliance

Test Data Management for Security and Compliance White Paper Test Data Management for Security and Compliance Reducing Risk in the Era of Big Data WHITE PAPER This document contains Confidential, Proprietary and Trade Secret Information ( Confidential

More information

Adopt a unified, holistic approach to a broad range of data security challenges with IBM Data Security Services.

Adopt a unified, holistic approach to a broad range of data security challenges with IBM Data Security Services. Security solutions To support your IT objectives Adopt a unified, holistic approach to a broad range of data security challenges with IBM Data Security Services. Highlights Balance effective security with

More information

Assessing the strength of your security operating model

Assessing the strength of your security operating model www.pwc.com Assessing the strength of your security operating model May 2014 Assessing the strength of your security operating model Retail stores, software companies, the U.S. Federal Reserve it seems

More information

10 Hidden IT Risks That Threaten Your Practice

10 Hidden IT Risks That Threaten Your Practice (Plus 1 Fast Way to Find Them) Your practice depends on intelligence. But can you count on your technology? You may not be in the intelligence technology business, but it s probably impossible to imagine

More information

Repave the Cloud-Data Breach Collision Course

Repave the Cloud-Data Breach Collision Course Repave the Cloud-Data Breach Collision Course Using Netskope to enable the cloud while mitigating the risk of a data breach BACKGROUND Two important IT trends are on a collision course: Cloud adoption

More information

DHS Data Privacy & Integrity Advisory Committee 07 May 2007. Comments of the. DHS Data Privacy & Integrity Advisory Committee

DHS Data Privacy & Integrity Advisory Committee 07 May 2007. Comments of the. DHS Data Privacy & Integrity Advisory Committee DHS Data Privacy & Integrity Advisory Committee 07 May 2007 Comments of the DHS Data Privacy & Integrity Advisory Committee Regarding the Notice of Propose Rulemaking For Implementation of the REAL ID

More information

Healthcare, transportation,

Healthcare, transportation, Smart IT Argus456 Dreamstime.com From Data to Decisions: A Value Chain for Big Data H. Gilbert Miller and Peter Mork, Noblis Healthcare, transportation, finance, energy and resource conservation, environmental

More information

Data Security Incident Response Plan. [Insert Organization Name]

Data Security Incident Response Plan. [Insert Organization Name] Data Security Incident Response Plan Dated: [Month] & [Year] [Insert Organization Name] 1 Introduction Purpose This data security incident response plan provides the framework to respond to a security

More information

HIPAA COMPLIANCE AND DATA PROTECTION. sales@eaglenetworks.it +39 030 201.08.25 Page 1

HIPAA COMPLIANCE AND DATA PROTECTION. sales@eaglenetworks.it +39 030 201.08.25 Page 1 HIPAA COMPLIANCE AND DATA PROTECTION sales@eaglenetworks.it +39 030 201.08.25 Page 1 CONTENTS Introduction..... 3 The HIPAA Security Rule... 4 The HIPAA Omnibus Rule... 6 HIPAA Compliance and EagleHeaps

More information

EAA Policy for Accepting and Handling Credit and Debit Card Payments ( Policy )

EAA Policy for Accepting and Handling Credit and Debit Card Payments ( Policy ) EAA Policy for Accepting and Handling Credit and Debit Card Payments ( Policy ) Background Due to increased threat of identity theft, fraudulent credit card activity and other instances where cardholder

More information

At Cambrian, Your Privacy is Our Priority. Regardless of how you deal with us on the phone, online, or in person we have strict security measures

At Cambrian, Your Privacy is Our Priority. Regardless of how you deal with us on the phone, online, or in person we have strict security measures Privacy Policy At Cambrian, Your Privacy is Our Priority At Cambrian Credit Union, we know our members are concerned about the confidentiality and security of their personal information. This Policy ensures

More information

Network Security Policy

Network Security Policy Network Security Policy I. PURPOSE Attacks and security incidents constitute a risk to the University's academic mission. The loss or corruption of data or unauthorized disclosure of information on campus

More information

Privacy Breach Protocol

Privacy Breach Protocol & Privacy Breach Protocol Guidelines for Government Organizations www.ipc.on.ca Table of Contents What is a privacy breach? 1 Guidelines on what government organizations should do 2 What happens when the

More information

Peregrine. AssetCenter. Product Documentation. Asset Tracking solution. Part No. DAC-441-EN38

Peregrine. AssetCenter. Product Documentation. Asset Tracking solution. Part No. DAC-441-EN38 Peregrine AssetCenter Product Documentation Asset Tracking solution Part No. DAC-441-EN38 AssetCenter Copyright 2005 Peregrine Systems, Inc. All Rights Reserved. Information contained in this document

More information

Privacy in the Cloud Computing Era. A Microsoft Perspective

Privacy in the Cloud Computing Era. A Microsoft Perspective Privacy in the Cloud Computing Era A Microsoft Perspective November 2009 The information contained in this document represents the current view of Microsoft Corp. on the issues discussed as of the date

More information

OVERVIEW. With just 10,000 customers in your database, the cost of a data breach averages more than $2 million.

OVERVIEW. With just 10,000 customers in your database, the cost of a data breach averages more than $2 million. Security PLAYBOOK OVERVIEW Today, security threats to retail organizations leave little margin for error. Retailers face increasingly complex security challenges persistent threats that can undermine the

More information

Information Security Policy. Document ID: 3809 Version: 1.0 Owner: Chief Security Officer, Security Services

Information Security Policy. Document ID: 3809 Version: 1.0 Owner: Chief Security Officer, Security Services Information Security Policy Document ID: 3809 Version: 1.0 Owner: Chief Security Officer, Security Services Contents 1 Purpose / Objective... 1 1.1 Information Security... 1 1.2 Purpose... 1 1.3 Objectives...

More information

City of Minneapolis Policy for Enterprise Information Management

City of Minneapolis Policy for Enterprise Information Management City of Minneapolis Policy for Enterprise Information Management Origin: Developed by the City Clerk s Office and Business Information Services. Based on requirements set forth in Federal and State regulations

More information

The IBM data governance blueprint: Leveraging best practices and proven technologies

The IBM data governance blueprint: Leveraging best practices and proven technologies May 2007 The IBM data governance blueprint: Leveraging best practices and proven technologies Page 2 Introduction In the past few years, dozens of high-profile incidents involving process failures and

More information

Data Privacy and Gramm- Leach-Bliley Act Section 501(b)

Data Privacy and Gramm- Leach-Bliley Act Section 501(b) Data Privacy and Gramm- Leach-Bliley Act Section 501(b) October 2007 2007 Enterprise Risk Management, Inc. Agenda Introduction and Fundamentals Gramm-Leach-Bliley Act, Section 501(b) GLBA Life Cycle Enforcement

More information

Do you know your privacy risks? How new technologies, changing business models, and emerging regulations are changing the data-protection landscape

Do you know your privacy risks? How new technologies, changing business models, and emerging regulations are changing the data-protection landscape January 2013 Do you know your privacy risks? How new technologies, changing business models, and emerging regulations are changing the data-protection landscape At a glance Threats to data security both

More information

IBM Analytics Make sense of your data

IBM Analytics Make sense of your data Using metadata to understand data in a hybrid environment Table of contents 3 The four pillars 4 7 Trusting your information: A business requirement 7 9 Helping business and IT talk the same language 10

More information

OPERATIONAL DIRECTIVE. Data Stewardship and Custodianship Policy. Superseded By:

OPERATIONAL DIRECTIVE. Data Stewardship and Custodianship Policy. Superseded By: OPERATIONAL DIRECTIVE Enquiries to: Ruth Alberts OD number: OD0321/11 Performance Directorate Phone number: 9222 4218 Date: February 2011 Supersedes: OD 0107/08 File No: F-AA-00673 Subject: Data Stewardship

More information

Understanding and managing data: The benefits of data governance and stewardship

Understanding and managing data: The benefits of data governance and stewardship WHITE PAPER Understanding and managing data: The benefits of data governance and stewardship Table of contents Introduction 2 Data governance and stewardship are essential 3 The value of data 6 Supporting

More information

CA Enterprise Mobility Management MSO

CA Enterprise Mobility Management MSO SERVICES DESCRIPTION CA Enterprise Mobility Management MSO At a Glance Today, your customers are more reliant on mobile technologies than ever. They re also more exposed by mobile technologies than ever.

More information

Microsoft Online Subscription Agreement/Open Program License Amendment Microsoft Online Services Security Amendment Amendment ID MOS10

Microsoft Online Subscription Agreement/Open Program License Amendment Microsoft Online Services Security Amendment Amendment ID MOS10 Microsoft Online Subscription Agreement/Open Program License Amendment Microsoft Online Services Security Amendment Amendment ID This Microsoft Online Services Security Amendment ( Amendment ) is between

More information

Things You Need to Know About Cloud Backup

Things You Need to Know About Cloud Backup Things You Need to Know About Cloud Backup Over the last decade, cloud backup, recovery and restore (BURR) options have emerged as a secure, cost-effective and reliable method of safeguarding the increasing

More information

Information Protection Framework: Data Security Compliance and Today s Healthcare Industry

Information Protection Framework: Data Security Compliance and Today s Healthcare Industry Information Protection Framework: Data Security Compliance and Today s Healthcare Industry Executive Summary Today s Healthcare industry is facing complex privacy and data security requirements. The movement

More information

THOMSON IP MANAGER KNOWING IS INGENIOUS

THOMSON IP MANAGER KNOWING IS INGENIOUS THOMSON IP MANAGER KNOWING IS INGENIOUS DID YOU KNOW? Thomson IP Manager is an all-inone IP management solution. So you don t have to worry about whether your IP data is secure, your processes are optimized,

More information

Cisco Security Services

Cisco Security Services Cisco Security Services Cisco Security Services help you defend your business from evolving security threats, enhance the efficiency of your internal staff and processes, and increase the return on your

More information

Predictive Analytics & Business Insights 2015, Chicago. Mudit Mangal Project Lead, Data Analytics, Supply Chain Sears Holdings Corporation 06/11/2015

Predictive Analytics & Business Insights 2015, Chicago. Mudit Mangal Project Lead, Data Analytics, Supply Chain Sears Holdings Corporation 06/11/2015 Predictive Analytics & Business Insights 2015, Chicago Mudit Mangal Project Lead, Data Analytics, Supply Chain Sears Holdings Corporation 06/11/2015 Agenda WHAT IS HAPPENING WHAT ARE BENEFITS AND CHALLENGES

More information