protecting the person, enabling business and empowering ...€¦ · ray boisvert, associate partner...

24
Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security: Protecting the Person, Enabling Business and Empowering Society IBM Canada – Security

Upload: others

Post on 11-Aug-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Ray Boisvert, Associate Partner

IBM Security / © 2020 IBM Corporation

The Indivisibility of Privacy and Security:

Protecting the Person, Enabling Business and Empowering Society

IBM Canada – Security

Page 2: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

IBM Security / © 2020 IBM Corporation 2

Tyranny vs Freedom

Page 3: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

IBM Security / © 2020 IBM Corporation 3

Turning Points

Page 4: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

IBM Security / © 2020 IBM Corporation 4

The “End of History”

Page 5: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Human Security and Technology in Transition

IBM Security / © 2020 IBM Corporation 5

Page 6: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Threats: Analog to Digital

IBM Security / © 2020 IBM Corporation 6

Page 7: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Emergence of Asymmetrical Conflict and Hybrid Warfare

IBM Security / © 2020 IBM Corporation 7

Page 8: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Lawful Investigations in Perpetual Conflict

Page 9: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

IBM Security / © 2020 IBM Corporation 9

Political Guidance is Clear

“…cyber crime continues to be an existential threat to the Canadian and global economy.”

- Financial System Review – 2019 (BoC)

Page 10: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Tipping Point

Canadian GDPR?

ISED Minister Navdeep Bains Mandate Letter

“the letter signals changes that we can anticipate to Canada’s

privacy laws and how they will be enforced. Overall, individual rights

will be strengthened and organisations will have more significant

compliance obligations,”

- Lawson Lundell, LLP

Page 11: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

IBM Security / © 2019 IBM Corporation 11

Page 12: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Success Starts with a Strategy

At what level does your security strategy understand your business or vice versa?

Page 13: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Headline

IBM Security / © 2019 IBM Corporation 13

Photo is For Position OnlyReplace using guidance posted here:

www.ibm.com/innovate/brand/photography

30% of C-level executives are responsibly using employee data

80% of executives are reducing personal customer data retained

€50 Millionamount Google fined for GDPR violations

CISOsasked to function as CPOs, but don’t feel prepared

Privacy is a strategic imperative for organizations

“By 2020, organizations that adhere to customer privacy best practices will gain 10% more in revenue over competitors that are caught lacking.”

- Gartner

Page 14: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Privacy concerns we hear from our clientsacross the globe

IBM Security / © 2019 IBM Corporation 14

• Understanding changing privacy regulations

• Automating manual privacyprocesses that don’t scale

I need help…

• Gaining insight into privacy risk and impact on my business

• Understanding how to handle personal data

• Protecting my brand while meeting customer privacy expectations

• Conducting my first Privacy Impact Assessment (PIA)

Page 15: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Continuous privacy management strategy

IBM Security / © 2019 IBM Corporation 15

IBM Unified Privacy Controls Framework

Assess strategy and roadmapIdentify impact of privacy regulations; Plan Technical and Organizational Measures (TOMs)

Defined implementation planIncludes data protection and privacy controls, processes & solutions to be implemented

Process enhancements completedTOMs in place; Personal data discovery, classification and governance in place

Operational framework in placeBegin the new privacy-ready method of working

Continuous monitoring and reportingMonitor TOMs execution; deliver privacy compliance evidence to internal and external stakeholders

Transform Operate ConformDesignAssess

Expertise | Technology | Open Ecosystem

Page 16: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

IBM Security / © 2019 IBM Corporation 16

Promote privacy, build trust, differentiate and grow

Gain risk-based privacy insights

Build a strong privacy program

Automate privacy controls

Page 17: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

IBM Security / © 2019 IBM Corporation 17

Risk and privacy assessment

Privacy readiness

Regulatory expertise

Build a strong privacy program

— Assess risk and privacy controls

— Develop privacy readiness roadmap

— Conduct executive reviews

— Implement privacy and security measures

Implement a holistic, continuous, dynamic privacy foundation

IBM Data Privacy Services

IBM Promontory

Page 18: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

18

IBM Security / © 2019 IBM Corporation 18

Gain risk-based privacy insights

— View privacy and risk from a single dashboard

— Prioritize actions for risk mitigation

— Govern and control access to personal data

— Apply necessary security and privacy controls

— Prepare for privacy incident response

Leverage risk-based visibility and privacy insights for actionable business impact

Powered by IBM integrations and third-party solutions

IBM Security

IBM Promontory

IBM Blockchain

Page 19: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

IBM Security / © 2019 IBM Corporation 19

Automate privacy controls

— Simplify and automate privacy processes— Rapidly address privacy audits and requests— Automate authorized identity access to

personal data— Respond automatically to a privacy incident

Protect personal data at rest and in motion, on premises and in the cloud

Data protection and encryption Identity and access management Incident Response Orchestration IBM Services

Page 20: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Strategic and Transparent

Page 21: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Leverage Creativity

Page 22: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Good for Business

“It is a business imperative and competitive advantage for companies, their boards, and senior leaders to embrace accountability”

- Bojana Bellamy

President, Centre for Information Policy Leadership (CIPL)

- Cisco 2020 Data Privacy Benchmark Study

Percentage of companies getting significant benefits in each area

PRIVACY

Page 23: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Less is More

“Value goes to those who refine it, not to those who just hold it… having a lot of data,

for the current state of AI, is useful. But there’s more and more AI innovation being

done that learns with less data.”

- Ginni Rometty

Chairperson, President, CEO of IBM

Page 24: Protecting the Person, Enabling Business and Empowering ...€¦ · Ray Boisvert, Associate Partner IBM Security / © 2020 IBM Corporation The Indivisibility of Privacy and Security:

Schedule Sign-up VisitSavea consultation with our security experts

for IBM X-Force Exchangeexchange.xforce.ibmcloud.com

the X-Force Cyber Rangebit.ly/X-ForceCommand

X-Force IRIS’s number1-888-241-9812

Take your next steps with us

IBM Security / © 2020 IBM Corporation 24