Data Protection Institute

Join us for a complimentary half-day virtual conference where we bring together industry experts to explore the ever-evolving data protection concerns your organization is facing. This interactive program includes a keynote chat with Dr. Larry Ponemon of The Ponemon Institute, presentations, a panel discussion, and an incident response tabletop exercise.

Participants will leave with practical solutions and a better understanding of these important topics:

• Trends in data protection and the costs to respond to a data breach or cyberattack
• Ways to decrease the cost of a data breach
• Types of breaches that have the most severe financial consequences
• The economic value of prevention in the cybersecurity lifecycle
• Managing the complexity of data protection regulation
• Mistakes to avoid in data protection compliance
• What works and what doesn’t when it comes to protecting data
• The continuing effect of the COVID-19 pandemic on data security
• How to obtain organizational commitment to data protection in general
• Common pitfalls to avoid in your incident response
• The value of a well-tailored and drilled Incident Response Plan

Agenda 

Sessions

Keynote Chat with Dr. Larry Ponemon of The Ponemon Institute
Join us for a fireside chat with Dr. Ponemon addressing:

• Trends in the costs to respond to a data breach or cyberattack
• Investments in people, processes, and technologies to help minimize the financial consequences of a breach
• How time to discovery and containment relates to the cost of a data breach
• Ways to decrease the cost of a data breach
• Types of breaches that have the most severe financial consequences
• The economic value of prevention in the cybersecurity lifecycle
• The economics of security operations centers and what investments should be made for effective results

Managing the Complexity of Data Protection Regulation
HSE’s Privacy and Data Security team will share practical solutions for dealing with the increasing complexity and confusion surrounding data protection law and regulation. From CDPA to CCPA to CPRA to GDPR and beyond, certain common regulatory threads appear that allow an organization to direct its data protection efforts in a way that meets the core obligations of many data protection regimes—reducing cost, redundancy, and burden. The HSE team will also discuss risks to avoid both in relation to your approach to data protection compliance as well as the increasing risk of cyberattacks and data protection blunders.  

New York State Continuing Legal Education (CLE) Credits: New York State CLE credit: 1.0 Professional Practice

PRESENTERS:

F. Paul Greene, CIPP/US, CIPP/E, Partner

Daniel Altieri, Senior Associate

Laura Schwalbe, CIPP/US, Senior Associate

Panel Discussion:  What Works and What Doesn’t When It Comes to Protecting Data
We’ve gathered together three experienced professionals with varied data protection backgrounds to discuss strategies they have seen work in practice, and others that have failed. We’ll discuss the particular challenges facing higher education, healthcare, financial institutions, and fintech, as well as general challenges facing organizations of all sizes and from all industries, including their legal departments. We will also highlight coming trends in data protection, the continuing effect of the COVID-19 pandemic, and questions on how to obtain organizational commitment to data protection in general.

New York State Continuing Legal Education (CLE) Credits: New York State CLE credit: 0.5 Professional Practice

PRESENTERS:

Christopher Hayes, Esq., Counsel at KeyBank

Scott Morris, SVP, CISO at Zipari

Jason Youngers, Information Security Officer at Ithaca College

MODERATOR:

Viviane Stover, CISA, Cyber Range Producer and Business Director at Rochester Institute of Technology

Bonus Session:  Virtual Incident Response Tabletop Exercise
Join GreyCastle Security and HSE for this lively virtual tabletop exercise, drawing inspiration from real-life breach response scenarios. We’ll explore common pitfalls to avoid in relation to incident response and answer questions that many organizations have, including when to engage outside experts, how to handle internal messaging, whether you need to report the incident to authorities or affected individuals, and how to avoid making the incident worse than it is. We’ll also explore the key value of a well-tailored and drilled Incident Response Plan.

New York State Continuing Legal Education (CLE) Credits: New York State CLE credit: 0.5 Professional Practice

PRESENTERS:

Adam Dean, Senior Security Specialist at GreyCastle Security

Mike Stamas, Co-Founder and Vice President of Business Development at GreyCastle Security

F. Paul Greene, Partner, Harter Secrest & Emery LLP

Who Should Attend?

• Data security, privacy, and IT professionals

• CISOs and Chief Privacy Officers

• Risk management professionals

• In-house counsel

• Financial executives

• CEOs and other business owners

• IT auditors

• Cybersecurity and information science faculty

• Anyone interested in information data protection strategy, compliance, and risk management