In today’s episode we taste a brew from New Belgium, specifically their Trippel. On the bytes front, we discuss the recent SEC rules changes relative to cybersecurity, including the 8-K and 10-K filings. The new 8-K rule requires that organizations disclose material cybersecurity incidents within four days of making the determination that the incident was […]
B&B: New Belgium & SEC Rules Changes Read More »
Today we’re talking about Leffe Blonde and privacy foundations. Specifically, we’re highlighting the changes in the discourse I’ve observed recently, as well as the top three things I think organizations should be doing to jumpstart their privacy programs:
1. Privacy Program Assessment
2. Privacy Program Governance
3. Data Discovery
Please let me know your thoughts and feedback… but note the following:
1. It was admitedly a really bad pour… don’t kill me
2. Disregard the mic cable that seemed to be grabbing on for deer life
Enjoy!
B&B: Leffe Blonde & Privacy Foundations Read More »
The SolarWinds catastrophe is back in the news. But, this time for a new reason: corporate and CISO liability. Here’s my initial take: CISOs beware!
SolarWinds: A New Wave of Liability Concerns Read More »
It’s important to base your security program on a standard. This helps with ensuring that you have a solid, well-rounded program that doesn’t have any gaping holes. But, picking which framework can be a challenge. In this article, I provide some guidance on how to go about picking a framework and where I typically start.
Getting Started in GRC (Part 2) – Picking a Framework Read More »
Have you struggled with how to get started on your GRC journey? You’re not alone. At Trace3, we commonly see organizations getting stuck at one point or another. Often these challenges result from a lack of focus on the core aspects of GRC.
In this article, I want to cover some basic GRC concepts and relationships that have helped me over the years. If you’re doing these basic things well, you’re ahead of the game! In the future, I’ll have additional articles to describe how you can build on this foundation to take your GRC program to the next level.
Getting Started in GRC (Part 1) – Basic Relationships Read More »
I’ve decided, that from January 1st, I’ll only be watching videos in 1080p or higher. It’s my New Year’s Resolution
A lame joke to start off the year… Read More »
In 2022, many organizations finally got around to tackling that data problem. You know, the problem of having tons of data but not knowing anything about where it is or who they’re sharing it with?
We at Trace3 helped many of our clients start down the path of solving this problem through some innovative twists on old school processes. Namely, performing BIAs to identify the data they collected and associating it to business processes.
Howdy folks! If you’re here, you probably got duped into clicking something on Google. I’m sorry for that. But, while you’re here, why don’t you get to know me a bit… I’m a California-based attorney with a focus on cybersecurity and privacy. In a previous life, I also practiced in the areas of estate planning
