Privacy, Regulations, and Cybersecurity: The Essential Business Guide

Cover......Page 1
Title Page......Page 5
Copyright......Page 6
Contents......Page 7
Foreword......Page 9
Preface......Page 11
About the Author......Page 15
Acknowledgments......Page 17
Part One Privacy......Page 21
Chapter 1 Understanding Privacy......Page 23
Chapter 2 A (Very) Brief History of Privacy......Page 29
The Legal Case for Privacy (the Big Print)......Page 31
Slouching toward Privacy......Page 32
Debating Privacy in the US......Page 35
Confidentiality vs. Privacy......Page 37
Chapter 3 The Legal Case for Privacy (the Finer Print)......Page 41
International Privacy Legislation......Page 51
Part Two Regulations......Page 65
Chapter 4 Introduction to Regulations......Page 67
Preparing to Take Charge......Page 69
Creating Your Privacy Profile......Page 71
Know before You Go: Using the Regulations Section......Page 73
One Last Thing before We Go!......Page 75
United States......Page 77
Federal Regulations......Page 78
State Regulations......Page 81
California......Page 85
Maine......Page 89
Amendment to the Nevada Privacy of Information Collected on the Internet from Consumers Act via SB 220......Page 92
Data Protection in the United States: Conclusions......Page 96
Canada......Page 97
Mexico......Page 102
Chapter 6 European Regulations......Page 109
Russia......Page 126
Switzerland......Page 132
Coming Soon to a European Union Near You!......Page 136
Chapter 7 Asia‐Pacific Regulations......Page 139
China......Page 140
India......Page 147
Japan......Page 153
Australia......Page 157
Economic Community of West African States......Page 165
Nigeria......Page 170
South Africa......Page 172
Egypt......Page 177
Brazil......Page 181
Argentina......Page 186
Colombia......Page 188
Part Three Privacy and Cybersecurity......Page 191
Chapter 10 Introduction to Cybersecurity......Page 193
Everything You Always Wanted to Know About Tech (But Were Afraid to Ask Your Kids)......Page 194
In the Beginning 1…......Page 195
Key Definitions......Page 197
Cybersecurity Defined......Page 201
Confidentiality......Page 202
Integrity......Page 203
Safety......Page 204
Ensuring and Preserving......Page 205
Cybersecurity Controls and Defense in Depth......Page 213
The Threats......Page 214
Threat Agents......Page 215
Key Trends Influencing Threat Agents......Page 216
The Nature of Hackers......Page 217
Types of Attacks......Page 218
A Brief Cyberglossary......Page 220
What's the Point of It All?......Page 225
Vision and Mission Statements......Page 226
Culture and Strategy......Page 227
Off to See the Wizard......Page 229
What Does Organizational IT Typically Look Like?......Page 230
What's at Risk?......Page 231
Threat Assessment......Page 232
At the Club House Turn!......Page 235
Mitigating Risk......Page 237
Incident Response Planning......Page 238
Chapter 13 Privacy by Design Overview......Page 241
The Case for Frameworks......Page 248
Chapter 14 Cover Your Assets!......Page 255
Asset Classification......Page 258
Asset Metadata......Page 260
A Fleeting Glimpse into the Other Side......Page 264
Business Impact Analysis......Page 266
One Spreadsheet to Rule Them All......Page 275
Chapter 15 Threat Assessment......Page 281
Internal Threats......Page 283
External Threats......Page 286
Threat Rankings......Page 290
Threat Intelligence......Page 291
Threat Modeling......Page 293
Chapter 16 Vulnerabilities......Page 295
Who's Who in Vulnerabilities Tracking......Page 296
Vulnerabilities: Mapping and Remediation......Page 299
Vulnerability Testing......Page 302
Chapter 17 Environments......Page 307
On‐Premises Computing Environments......Page 309
Private Cloud Computing Environments......Page 310
Public Cloud Computing Environments......Page 311
Hybrid Cloud Computing Environments......Page 312
Cloud Security Questions......Page 314
The Internet of Things (IoT)......Page 315
Distributed Workforces......Page 317
Chapter 18 Controls......Page 321
Preventative Controls......Page 322
Detective Controls......Page 325
Corrective Controls......Page 326
Defense in Depth......Page 327
Privacy and Cybersecurity Controls......Page 329
People, Technology, and Operations......Page 333
Policies, Standards, Procedures, and Guidelines......Page 336
Putting It All Together......Page 340
Chapter 19 Incident Response......Page 341
Incident Response Planning: Not Just a Good Idea—It's the Law!......Page 342
Incident‐Response Plan Phases......Page 344
Preparing Your Incident‐Response Plan......Page 347
Identifying Incidents......Page 352
Containing Incidents......Page 354
Treating Incidents......Page 356
Incident Recovery......Page 357
Post‐Incident Review......Page 359
Do It All Over Again!......Page 360
Chapter 20 Welcome to the Future! Now, Go Home!......Page 361
Social Transformation......Page 362
Technology Transformation......Page 366
Business Transformation......Page 371
The Story of ACME......Page 372
Final Words......Page 376
Bibliography......Page 379
Index......Page 397
EULA......Page 419