Identify And Influence Data Security And Privacy Stakeholders

As a security and risk (S&R) professional, you're in the direct line of fire when it comes to privacy. The business expects you to: 1) understand the laws, regulations, and standards for both privacy and data protection, and 2) ensure that the organization complies with those rules. But where do you go to understand this vast landscape, especially when laws vary country by country and even state by state? Where do you start? And is it even your job? You should manage privacy like other critical functions — as an ongoing process, not a one-time planning or triggered event. We designed this report to help S&R executives responsible for their organization's data security and privacy efforts to establish, implement, and maintain a framework for dealing with privacy and the impact of privacy laws and regulations on your security strategy, policies, and controls.