Amanda Berger (Rosen)

If #privacy and your #brand a matter let’s connect. Fast track to avoid fines!

4

#AIGovernance is the hot topic of our age. #data and #AI are powerful combination but it may become liability very quickly. Join us on May 30th in person or virtually. #AIgovernance #datagovernance #privacymatters #NIST #IAPP

6

Pennsylvania’s Consumer Data Privacy Act is Now Law! As of March 18, 2024, Pennsylvania has officially passed the Consumer Data Privacy Act (House Bill No. 1201, Session of 2023). This landmark legislation enhances consumers' data privacy rights and sets forth clear obligations for data controllers and processors. Key Highlights Consumer Rights: Consumers now have enhanced rights, including the ability to access, correct, and delete their personal data. They can also opt out of data processing for targeted advertising or sales. Business Responsibilities: Data controllers must limit data collection, obtain consent for processing sensitive data, and implement robust data protection measures. Enforcement and Penalties: Strict penalties are in place for non-compliance, emphasizing the importance of businesses aligning with these new standards Is your business fully compliant with these regulations? Privacy24 is here to help! Our seasoned compliance experts specialize in helping businesses navigate complex data privacy laws. Our expert team can ensure that your company not only complies with this new law but also leverages compliance as a competitive advantage. Our Services Include: Comprehensive compliance audits. Tailored policy development and strategic implementation. Training and ongoing support to maintain high compliance standards. Don’t risk penalties or damage to your reputation. Contact us today for a consultation and let Privacy24 help you achieve and maintain compliance with confidence. 🌐 For more information, visit privacy24.io or send us a direct message here on LinkedIn! #DataPrivacy #ConsumerProtection #PennsylvaniaLaw #ComplianceExperts #Privacy24

6

Great read! 📣 At Adjust, user privacy, fraud prevention, and data security have always been at the forefront of everything we do. Hear from Adjust's Matt Hyder about some of our key measures and ongoing developments in the privacy and fraud prevention space.

11

Great read! 📣 At Adjust, user privacy, fraud prevention, and data security have always been at the forefront of everything we do. Hear from Adjust's Matt Hyder about some of our key measures and ongoing developments in the privacy and fraud prevention space.

11

This The Cipher Brief interview with William Usher discusses the challenges and opportunities presented by new technologies like generative AI. The intelligence community needs to adapt to these changes to stay competitive. As noted by the Special Competitive Studies Project - SCSP, one way to do this is to use open-source intelligence (OSINT) better. A growing amount of data from private companies could be valuable for intelligence purposes. The intelligence community currently struggles to collect and analyze this data. The authors recommend creating a new organization to focus on collecting and integrating commercially available data. The interview is worth reading if you are interested in the future of the intelligence community. #OSINT #PAI #CAI #EmergingTechnologies #GeopoliticalRisk #informationoperations https://lnkd.in/gi8t8SsW

6

1 Comment

FYI: FTC orders Cerebral to restrict how consumer data can be shared: The Federal Trade Commission (FTC) has ordered Cerebral, Inc. to restrict how the company can use and/or disclose sensitive consumer data. #cyber #cybersecurity #channelpartners #innovation #technology #management

3

The potential exposure of secrets due to these findings is very significant and long-term, and the implications for secure coding practices are clear - you should NEVER hard-code secrets in code, not even once, not even if you overwrite it immediately after comitting it. It might continue to lurk in the underlying filter where malicious actors will find it.

15

The American Privacy Rights Act (APRA) proposes stronger consumer data rights and business rules. Building on previous efforts, it focuses on data access, correction, deletion, and exportation. Small businesses with less than $40 million in revenue and limited data processing are exempt unless they sell data. Marketers, stay smart: collect and share data wisely to meet privacy expectations. #PrivacyLaw #FederalPrivacy #APRA #ConsumerDataRights

2

2 Comments

Here’s a link to the video, for anyone who missed this discussion with Patrick B., Steven Teppler, David Navetta and myself on how CISOs and GCs can partner to better protect their organizations, C-suites and boards in this rapidly evolving regulatory and threat landscape.   "A New Era of Transparency to Protect Investors, CISOs at Public & Private Companies"   Webinar for CISOs, CIOs, CTOs, Heads of IT and GCs, as well as C-Suite Executives and Board Members, at Publicly - and Privately-owned U.S. companies. This video session is designed to deliver encouraging news to CISOs, GCs, and senior staff responsible for protecting public companies and their management. We'll also address the needs of Boards of Directors facing regulatory liability risks under the new SEC Cyber Rule and NY DFS Second Amendment. Discover how CISOs can enhance their organizational stature by working closely with GCs to access Board/C-suite delegates, enabling a risk-focused approach to regulatory compliance and significantly minimizing senior management's regulatory liability risk exposure. Led by former CISOs, BISOs, and industry-leading cyber attorneys, this session will cover practical, commercially oriented issues to support future business growth without jargon or "in the weeds" discussions. Key topics include: • Building a team to meet daily interdisciplinary regulatory and business challenges, protecting the Board and C-suite, while also safeguarding CISOs by avoiding having a “target painted on your back”. • Needing to train on how to "speak senior management" to help meet the new regulatory compliance obligations related to cyber oversight by Boards via their C-suite delegates. • Ensuring the right technology underpinnings for required annual disclosures on Form 10-K, to address cyber risk management, strategy, and governance per the company's appetite/tolerance for this part of total enterprise risk.   https://lnkd.in/e82sxeDC   #CyberSecurity #CISO #ITLeaders #CyberCompliance #RegulatoryCompliance #BoardofDirectors #CyberRiskManagement #CIO #CTO #ITLeadership #VirtualWebinar #CyberAwareness #BusinessGrowth #CyberLaw #TechLeaders #CyberStrategy #RiskManagement #ThirdPartyRisk #CyberOversight #CyberGovernance #NewSECCyberRule #NYDFSSecondAmendment #NewCyberCorporateGovernance #NewCyberGovernance #CyberOversight #SECNewCyberOversight #NewBoardCyberOversight #CyberStrategy

17

This should be a discussion for all business executives - understanding the risks and advantages of deploying AI in the right way.

4

If you're interested in migrating from #Gatsby to The Astro Technology Company, or just migrating to #Astro in general, this training with Kathleen McMahon is really useful! Learn how she optimized her site’s performance, reduced #JavaScript reliance, and tackled styling issues through her swap. https://lnkd.in/eDyjBPS2

10

2 Comments

“High-performing employees report a 16% lower intent to stay in the face of on-site work requirements.” That little gem and work-life balance aside, having worked remote for 11 years I work harder, longer and deeper than I ever did when I was office based. That didn’t happen automatically. It required focusing on how to get working from home to work for me and requires regular reevaluation. Gartner’s R&A force is remote and global. Given the talent needs we have I can’t imagine being able to change that. Enabling effective, remote work is table stakes for us and has been for almost 20 years. There is great food for thought, even in the summary of this story. Check it out. Thanks, Erik   Gartner for HR | #GartnerHR #RTO #Talent #Risks #Cybersecurity #CISO

56

14 Comments

As compliance executives, you're often caught in urgent tasks, leaving little room for strategic thinking. This week, I've stepped back to spend time with my three children, reminding me of Stephen Covey's principle: "Sharpen the saw." Covey's habit emphasizes renewing ourselves to maintain effectiveness, crucial when governing complex AI management systems. Here's why stepping back is essential: 1. Gaining Clarity Stepping away from daily tasks gives us fresh perspective. This break allows me to refocus on what truly matters. It's easy to get lost in minutiae, but taking a break helps us see the bigger picture. Actionable Insight: Schedule regular retreats. Reflect on your AI management system goals. What do you want to create? What values guide you? This aligns with ISO 42001 clause 4.1 on understanding context, and 6.2 on AI objectives. 2. Enhancing Objectivity Distance brings objectivity. When we're too close to our work, it's hard to see flaws. Time away helps us evaluate strategies critically. Actionable Insight: Encourage a culture where team members review their work objectively. Foster an environment valuing personal renewal. This supports clause 9.2 on internal audits and 10.2 on corrective action. 3. Focusing on What's Important This break reminds me that what's most important isn't always urgent. For you, this means building a responsible AIMS rather than getting bogged down in every immediate issue. The tyranny of the urgent is just that…tyranny. Actionable Insight: Prioritize tasks aligning with long-term goals. Delegate or defer less critical tasks. Regularly review priorities. This relates to clause 5.1 on leadership and 6.1 on addressing risks and opportunities. 4. Renewing Energy and Creativity Time away rejuvenates us, leading to renewed energy and creativity. This renewal is critical for tackling complex compliance issues and innovative problem-solving in AI management. Actionable Insight: Integrate recharging activities into your routine. Find what renews your energy and practice regularly. This supports clause 7.1 on resources and 7.2 on competence. This week away is reaffirming the importance of stepping back. It's helping me rethink priorities and refocus on creating what matters most. I encourage you all to take time for renewal. It benefits you, your systems, and your teams. By taking time to sharpen our saw, we can: 1. Better understand our organization's context and stakeholder needs (clauses 4.1 and 4.2). 2. More effectively lead and commit to the AI management system (clause 5.1). 3. Improve our planning for risks and opportunities (clause 6.1). 4. Enhance our resources and competencies (clauses 7.1 and 7.2). 5. Strengthen our operational planning and control (clause 8.1). 6. Conduct more insightful performance evaluations (clause 9). 7. Drive continuous improvement (clause 10). If you'd like to discuss further, please don't hesitate to reach out…next week…😊 A-LIGN #iso42001 #TheBusinessofCompliance

16

🔐Securonix's Ankit Deka Featured in the San Francisco Examiner San Francisco Examiner Discussing the Future of Gen AI in Cybersecurity🔐 Ankit Deka, our UX designer, recently shared his expertise on designing Gen AI-led security products. According to Ankit, embracing Gen AI in UX design is crucial to staying competitive and delivering cutting-edge user experiences. 📰 Read the article: https://lnkd.in/g889uun9 Ankit was part of our team that developed Securonix EON, our groundbreaking suite of AI-Reinforced capabilities, which was recognized by CRN as one of the 20 Coolest Cybersecurity Products at RSAC 2024.🙌🏽 🌟 Join Us in Shaping the Future 🌟 We're excited about the transformative potential of Gen AI and are pioneering its integration into our cybersecurity solutions, transforming how CyberOps detects and respond to threats. Learn more about Securonix EON: https://lnkd.in/giSCTry4 #GenerativeAI #Cybersecurity #UXDesign #Innovation #GenAI #AIReinforced #SOC #CyberOps #SIEM #AI

3

If you or anyone you know is interested in a career in privacy or understanding how the industry is (rapidly) changing, share this or check out the Eye on Privacy podcast. Our Field Chief Privacy Officer, Ron De Jesus, and Jared Coseglia, CEO of TRU Staffing Partners, explore 7 key trends shaping the industry (link in comments). What to watch for— ➡️ 2023 was a rough year of tech layoffs but there are signs the market is bouncing back in 2024. ➡️ The CPO role is evolving to tackle new challenges, like those from AI advancements. ➡️ There's a rise in contract roles that might turn permanent, and a stronger focus on preventing burnout.

16

It was a pleasure speaking to Carrie Pallardy for InformationWeek about CISA's Secure by Design pledge, what it means to open source software maintainers, and what comes next: - Tidelift, a company that partners with open-source maintainers, is not only applying the principles outlined in the pledge to its own software, but it also published an update on the ways it is working to help open-source maintainers achieve the pledge goals. The company is requiring the open-source maintainers it works with to enable multi-factor authentication on all parts of their software supply chain and to have a vulnerability disclosure policy in place. It is also working with open-source partners to eliminate entire classes of vulnerabilities. We worked with a prominent project in the Java language ecosystem, jackson-databind, to basically rearchitect part of their library to reduce an entire class of remote code execution vulnerabilities that could have been potentially used as an attack on that library,” says Donald Fischer, cofounder and CEO of Tidelift. As time goes on, CISA and other industry stakeholders could raise the bar. “I hope that the scope of this expands over time. Certainly, there are other elements of the Secure by Design conversation that have been written about by CISA and its partners,” says Fischer. “So, hopefully the bar gets higher.” - Thank you to the U.S. Cybersecurity and Infrastructure Security Agency team including Bob Lord, Lauren Z., Jack Cable, Aeva Black, and Jen Easterly for pushing the industry *and* the open source community forward in this important domain. https://lnkd.in/emcYTidK

25

1 Comment