Discover and read the best of Twitter Threads about #AskSpirion
Most recents (5)
Q6 What measures and best practices should organizations take to ensure their data security practices are legally adequate? #AskSpirion
A6 All (or nearly all) modern privacy laws require that organizations conduct a risk assessment in order to apply proper controls, both administrative and technical. (1)
A6 Those organizations should review their assessments to make sure they account for changes in the kind of personal data used and how it’s being used. (2) --Scott
Q5 More than half of all states have proposed data privacy legislation. What steps can organizations take to ensure they are building global privacy capabilities for the regulatory future? #AskSpirion
A5 First, organizations should conduct a privacy risk assessment. It’s critical to understand just what data qualifies as personal, both on the surface and as used in practice. Second, they need to understand where it’s stored and how it’s used and who has access to it. (1)
A5 Finally, they should review their set of controls, both administrative and technical, and determine what changes need to be made in order to mitigate any identified risks.
--Scott (2)
--Scott (2)
Q3 How can organizations better guard against insider breaches? #askspirion
A3 (1) The key to minimizing insider breaches is to conduct an inventory of the personal information that your organization has in its possession and eliminating everything that you don’t need or is otherwise duplicative.
A3 (2) From there, classifying that information according to sensitivity and placing controls on it such as DLP will serve to prevent it from leaving the network or cloud data store. --Scott
Q2 What can organizations do to better scale their data privacy and compliance programs to accommodate consumers' rights over their data – including the right to be forgotten? #AskSpirion
A2 Scaling implies a combination of compliance strategy, processes to implement that strategy, and controls to prevent anything from falling through the cracks. (1)
A2 One method I use is to conduct a thought experiment: what if we were to receive a million RtbF requests? How would we scale to accomplish that? --Scott (2)
Q1 How can companies turn the protection of consumer data into a competitive business advantage? #AskSpirion
A1 By telling consumers that your products and services are superior because of the care that you take with consumer personal information. Said another way, that care is representative of how you approach everything that you do as a hospital, bank, media company, etc.--Scott
@threadreaderapp unroll
