Prevention or Response; Law – Policy – Procedure

Many new laws require companies to report to clients, customers or data subjects when there has been a breach of a data system that contains sensitive personal information. Other laws impose a legal duty to protect this information. Still other laws create liability for permitting a system to be used for data theft or data fraud. This session will focus on the duties and responsibilities on companies and government entities to prevent data loss, on the regulatory standards that currently apply to preventing such loss, and on the ways companies can effectively -- and legally -- respond to instances of data theft, data fraud, and data loss. An effective incident response program, coupled with intrusion monitoring and employee training, is essential as part of any data loss prevention scheme. In fact, even data breach notification can mitigate damages resulting from a data breach. This session will focus on effective and compliant strategies and policies for data loss prevention and incident response.

Presenting

Mark D. Rasch; Founding Partner, Secure IT Experts

Channel

Information Security

Date

Feb 11 2010

Duration

00:48

Tags

Law, Policy, Procedure