Scott Kirsner’s Post

🔍 My Takeaways from Privacy + Security Forum 2024 🔍 I wrapped up two packed days at the PSF Conference in DC last week with a delightful happy hour. Here are some of the conference topics that stuck out to me: 1.       AI, cybersecurity & privacy assessments still catch us by surprise Even when we regularly schedule internal audits, they can still seem to come out of nowhere and end up at risk of being deprioritized. As AI risk and impact assessments become the norm, practitioners may be wary of adding compliance burdens that might slow development. But AI’s broad-ranging risks call for specific attention to things like transparency, ethical checks, and a values-aligned development process. How can we keep these assessments from becoming formalities? Is the traditional, annual assessment a sustainable approach today? One suggestion was to have “ethics sprints” alongside dev sprints to ensure these considerations are top of mind without slowing things down. Does it make sense to group together internal and external privacy assessments to get them done in one go? 2.       Move over Data Mapping… Make room for Data Security Posture Management Data mapping has always been a challenge for organizations and Data Security Posture Management, the new paradigm for data management, seems to take a multipronged approach to data security. Data management for privacy is essential when it comes to data sharing. The FTC stressed the importance of vetting partners and conducting quick assessments (within 30 days of entering data-sharing agreements) in the X Mode case. The challenges of data mapping won’t go away soon but maybe a refresh is what we need. 3.       Algorithmic accountability – what does it look like? Who takes accountability when AI is deployed? While concerns about overregulation are real (do we really want to regulate Excel formulas?), one panelist pointed out that, at scale, even a simple formula can have major implications. The tech industry has often expanded quickly without robust controls and has faced tough consequences as a result. Ten years ago, few expected a $200M cyberattack to start from a compromised HVAC vendor’s credentials. The panelist’s point was that the cyber attack surface is broad, and as a parallel, so is the equity and algorithmic “fairness” attack surface. 4.       Privacy pros have fun There was so much laughter last week and I felt lucky to laugh AND wax philosophical with both new and old friends.

How to get your state to sponsor your conference

Come and join the conversation

Nice, conference should be packed

10X Your ROI at Every Conference Series Part 1 of 3- Pre-Conference

Well being is integral to being successful. Leaders in every discipline must be sensitive to the mental health of their employees. Dedicating time and other resources toward prevention of stress, burn out, and other issues affecting well being is a wise investment.

🎉 Here’s a recap of the unforgettable moments from the National Conference! Check out the highlights and see what made it so special. 📸 - #andersonsalesmanagement #nationalconference #conferencerecap

Read our newest blog post about Eddy's journey to become a public speaker!

10X Your ROI at Every Conference Series Part 1 of 3- Pre-Conference

10X Your ROI at Every Conference Series Part 1 of 3- Pre-Conference