PRIVACY AND SECURITY WHICH COMES FIRST? OR HOW DO I TALK TO MY INFORMATION SECURITY GROUP ABOUT GETTING PRIVACY INTO THE CONVERSATION.

No ratings

Presented at BSidesSLC 2017 by

Jerry Smith

Privacy and Information Security both share the control space, the question is how are controls implemented to meet regulatory requirements for both control areas. This presentation will deal with the issue of Privacy and Information Security and the misconception that the two are one in the same and the same controls can be used to meet regulatory requirements for both areas. My perspective is from the healthcare arena and patient perspective with regulations where we deal with the privacy and the security rules. What I am trying to do is get the recognition that we are talking about an apples and oranges situation and we need to treat the two as very different control perspectives. My focus will be on Privacy and hopefully I can get you to add it to your Information Security Team and ITS Teams awareness and get them to understand the differences between Privacy and Information Security. I want to provide you with some talking points that I hope will allow you to open that dialog and get a seat at the table and allow them to understand the critical nature of Privacy and the differences between Privacy and Information Security.