Show Highlights

In the previous episode, we focused on purchasing and securing IoT monitoring devices, implementing platforms, and securing the data associated with them. This time, Rebecca Herold and Nathan Gibson join Matthew to explore the role and value of whole organization information security and privacy plans. Do you have them? Should you have them? And what do they look like?

• Creating an Information Security Plan that achieves compliance and ensures the data is protected in the manner the organization needs. 
• Putting a framework in place that addresses the full lifecycle of data and ensures human behaviors follow the plan with regular checks, tests, communication, and training to confirm everyone in the organization is aware and following the plan. 
• How senior leaders must stay aware of how well the organization is implementing and evolving the plan.
• Successful security and privacy programs are the ones that coordinate closely and often report to the same person in the organization.

(Read the full transcript) 

About Our Guests

Rebecca Herold has over 25 years of IT, info sec, and privacy experience. She is the owner and CEO of The Privacy Professor, founded in 2004, and Privacy Security Brainiacs, founded in 2020. Rebecca hosts the radio/podcast show, "Data Security & Privacy with the Privacy Professor." She is an expert witness, entrepreneur and author who has received numerous awards and recognitions for her work throughout the course of her career. Rebecca has written 20 books to date, chapters in many books and hundreds of articles. Learn more about Rebecca.

Nathan Gibson is the Chief Security Architect and Director of Enterprise Security Architecture at Allstate. Nathan’s information security journey spans multiple industries including our nation’s Air Force, healthcare, fintech, residential and commercial security, with a heavy focus on cloud engineering security.