DATA SECURITY AND RISK MANAGEMENT

DATA SECURITY AND RISK MANAGEMENT

1. Data security and privacy

   • Ethical, regulatory and legal issues
     • General Data Protection Regulation (GDPR)
       • Mandatory data inventorying and record keeping of all processing of European personal data
       • Mandatory data-breach notification to regulators and affected individuals
       • the right of individuals to request that their personal data be erased
       • a requirement for routine privacy impact assessments
       • mandatory employment of data protection officers
   • Ethics and data security
     • Privacy
     • Confidentiality
     • Transparency
     • Identity
     • Free Choice
   • Internet security
     • Advanced authentication
       • Password
     • Multifactor authentication
       • Username+password+Code
     • Biometrics
       • Fingerprints, voice
   • Website Security
     • Denial of Service (DoS) attack
       • Makes multiple, frequent attempts to access or log in to a website (Site become overloaded, disrupting normal operation)
     • Distributed denial of service (DDoS) attack
       • DoS launched simultaneously from a large number of computers, increasing the load on the target system
       • Do not result in the theft of data
       • Website partially or completely inaccessible>Frustration and disrupting business transaction
   • Communication & Social Media
     • Doxxing
       • An attempt to harm or humiliate a person by posting sensitive personal information online
     • Phishing
       • A malicious message may be disguised as a legitimate email

2. Cloud computing

   • Security
   • Location, Jurisdiction, Ownership & Privacy
   • Performance
   • Risk Analysis

3. Security on a blockchain

4. Outsourced Security

   • Shortage of skilled cybersecurity specialists
   • Cost