No one can (or perhaps should) be accountable for something they either cannot influence or don't understand. This talk will highlight ways to create that connective communications tissue, to build buy-in for pragmatic security and data protection.
It is the foundation from which we build consensus and to tackle another challenge at the core of prospering as a security function: The GRC paradox. Workload invariably exceeds available hours in staff days. Having the means to triage is grounded in understanding prevailing risks. In order to understand risk, we need skilled personnel and time. In order to justify the budget for personnel and time, we need to understand risk.
This session will also discuss how to break that deadlock by moving triage left in the development lifecycle and keeping things simple enough to involve the rest of the organization in that process.
Whos-Accountable-Anyway-Sarah-Clarke-11th-Nov - Depending upon your browser, this will download a secure PDF of the presentation OR it will open in an iFrame for viewing. Effective Feb 15, 2022, only registered users will have access. We think Ms. Clarke's work should be protected by your agreement to her copyright and shared rights of Privacy.
After a start in IT and network security, she too often saw colleagues burnt out. Frequently because they didn't have data and sponsorship to describe challenges and drive change. This lead to a ground-up redesign of various processes, including vendor security governance, and sustainable triage. Working mainly in financial services.
She speaks and writes about related things, in between advising companies via her own firm Infospectives Ltd. She also volunteers with not-for-profit For Humanity, designing independent AI audit solutions, resulting in the election to their board as Director earlier this year. She is also a guest lecturer on vendor security governance for University of Manchester IT Governance Masters students.
Learn more about our Privacy Advisor Sarah Clarke - whom we endorse to the highest degree possible.