Home > News & Resources > Risky Business Podcasts, A Living Library > Managing Information Risk - webcast

Managing Information Risk - webcast

Refer to friend

Receiver's Email:	*
Your Name:	*
Your Email:	*
Your Message:

When Information Threatens an Enterprise — A Look at Managing Information Risk

Enter email address for full transcript:

I would like to learn more. Please contact me.

NetProtect 360^SM - Information Risk Coverage

Overview

Application

Setnor Byer President Anita Byer welcomes listeners to the Webcast and introduces subject matter expert Stephen F. Douglas, CSP, ARM. Stephen is a Risk Control Director for CNA Insurance, specializing in Technology and Information Risk. Stephen is one of our industry’s leading experts on Information Risk.

01-welcome.mp3

Stephen defines “information risk.”

02-info-risk.mp3

Anita asks Stephen to give some examples of First Party Risks.

03-first-party-risks.mp3

Anita and Stephen discuss how the crime of extortion has evolved in the Information Age; the concept of Third Party Risk is explained.

04-extortion.mp3

The speakers discuss the kinds of personal information vulnerable to theft.

05-info-vulnerable.mp3

Anita asks Stephen to explain how federal and state laws have evolved to address the issue of information risk.

06-info-risk-laws.mp3

Anita and Stephen discuss the high costs of an information breach and the expenses that businesses incur when an information breach occurs. Stephen explains how data on breaches of private information can be used to analyze risk as well as identify the chief causes of privacy breaches.

07-high-costs.mp3

The speakers discuss the risks posed by both hacking incidents and physical security breaches.

08-risks-posed.mp3

Anita and Stephen discuss the steps that businesses must take to address the threat of privacy breaches.

09-address-threat.mp3

Anita and Stephen discuss why it is vital for businesses to develop strong information security policies.

10-security-policies.mp3

Anita asks Stephen to identify the legal requirements on businesses to develop privacy polices; Stephen enumerates guidelines for developing such policies.

11-legal-reqs.mp3

Stephen outlines the essential elements of an Information Security Policy.

12-info-sec-policy-reqs.mp3

Anita and Stephen identify the types of controls necessary for physically securing data and the devices that store data.

13-physically-securing-data.mp3

Encryption and other options for protecting information are discussed.

14-encryption.mp3

Anita and Stephen weigh the costs of balancing the need for data retention with the importance of properly destroying unneeded data.

15-weigh-costs.mp3

The speakers discuss key network security issues and the necessary procedures to protect network data.

16-network-security.mp3

Anita and Stephen outline the elements of contingency plans that organizations must develop in the event of an organizational data breach.

17-contingency-plans.mp3

The need for organizations to have proper legal agreements with vendors with whom they share sensitive data is discussed.

18-legal-agreements.mp3

Anita and Stephen discuss the value of information risk insurance.

19-info-risk-insurance.mp3

Policy options and specific coverages available under Privacy Liability and Network Security policies are identified.

20-policy-options.mp3

Parting remarks from Anita and Stephen. Those interested in learning more about how to manage their organization’s information risk can contact Anita Byer personally at 1.888.253.8498.

21-parting-remarks.mp3