Now Available:

line

Featured Resources:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Rebecca.

« Average Cost of ID Theft Per Victim is $31,356 | Main | Many Kinds of Identity Theft Cause Many Types of Long Lasting Negative Impacts »

Microsoft's Charney Agrees That Information Security and Privacy Pros Must Work Together

Yesterday (Wednesday) was the final day of the IAPP Privacy Academy, and it was a great conference for me! I have been preaching about information security and privacy collaboration within a 2-day training seminar over the past 2 years, so it is good to finally start hearing others recognize and promote the need for information security and privacy practitioners to work together.

Scott Charney, vice president of Microsoft's Trustworthy Computing Group, gave a speech at the conference highlighting this need. He pointed out the damage that can be done through a well-coordinated and successful cyber attack; not only to the business but also to the privacy of personally identifiable information (PII).

Charney communicated the results of a recent Microsoft survey of 3,600 security, privacy and marketing practitioners in the United States, the UK and Germany; 78% of respondents believe their marketing department tells the information security and privacy leaders what PII the company collects, but only 30% of marketers say they actually communicate such information to the information security and privacy areas.

Charney also pointed out that companies that have the privacy and information security areas work together have far fewer data and privacy breaches.

Indeed!

Information security practitioners help the business to keep malicious code, such as viruses, Trojans, keyloggers and other malware from getting onto the network. There are many types of malicious software that allow fraudsters, crooks and down-right bad people to peek into corporate networks and employee PCs and gather copies of sensitive data such as PII that is located there.

Privacy pros must understand how the information security threats also threaten privacy.

When the information security and privacy practitioners do not work together, this lack of coordination creates business vulnerabilities that outside crooks or insiders will exploit.

TrackBack

TrackBack URL for this entry:
http://www.realtime-itcompliance.com/type/mt-tb.cgi/555

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Rebecca Herold's Bio:

Rebecca Herold,CISSP, CIPP, CISM, CISA, FLMI, has been providing information security, privacy and regulatory assistance and services to organizations from a wide range of industries for over 18 years. Rebecca was instrumental in building the information security and privacy program while at Principal Financial Group, which was awarded the CSI Information Security Program of the Year Award in 1998. IT Security ranked Rebecca as one of the top 59 IT security influencers, and Computerworld put Rebecca their list of the 25 top privacy experts and on their list of the 9 best privacy consulting firms. Rebecca has been CPO for two consulting organizations, and has had her own information privacy, security and compliance business since 2004. Rebecca has written chapters for several books, dozens of articles, and has been writing a monthly privacy column for the CSI Alert newsletter since the beginning of 2001, and is working on her 11th book. Some of her other books include The Privacy Papers, Managing an Information Security and Privacy Awareness and Training Program, The Definitive Guide to Security Inside the Perimeter (Realtime Publishers), The Shortcut Guide to Improving IT Service Support through ITIL (Realtime Publishers), and The Practical Guide to HIPAA Privacy and Security Compliance. In addition, Rebecca is the leader of The Realtime IT Compliance Community where she posts to her IT Compliance weblog. You can contact Rebecca at: rebecca_herold@realtimepublishers.net.