18th Annual Compliance & Ethics Institute 2019

#P06

P6: Cyber Security Due Diligence: Will You Be the One to Save Your Company & CEO From Disaster? Charles Shugg, Partner | Chief Operating Officer, Sylint Group, Inc View Description

• Discuss the importance and criteria for cyber security due diligence and how it affects corporate or organizational reputation damage, judicial punishment and senior executive careers
• Review case studies that highlight the lack of "reasonable" corporate cyber security due diligence regarding processes, assets and incident response actions
• Provide best practice guidance to improve senior executive awareness, reduce corporate risk and increase the likelihood of C-Staff career survival following a cyber security breach

IT 106

#P14

P14: GDPR Compliance Post-Mortems: Lessons Learned from Facebook, Uber, and Others Scott Giordano, V.P., Corporate Privacy, and General Counsel, Spirion View Description

• In the nearly 18 months since the EU GDPR was brought into force, several well-known companies have been penalized by EU data protection authorities for misuse and loss of personal data.
• In this session, we will review these post-mortems, determine what went wrong, and discuss the implications for complying with the GDPR and other multinational data protection regulations going forward.
• We will also examine recent European Data Protection Board (EDPB) opinions and discuss how they affect overall compliance strategy

IT 205

#P22

P22: Move the Needle - Active Agent Approach to Cybersecurity and Data Protection Compliance Brian Novack, Lead Compliance Analyst, AT&T Oleg Vasilyev, Director Compliance, AT&T View Description

• Core products and processes at each company are dependent on IT. Active threats continue to evolve and drain resources. This limits a company's ability to reinvest, develop products, expand offerings to drive the next wave of growth, or to remain viable.
• To help, compliance must become an active partner supporting all facets of a company to establish the expectation for compliance, plan for compliance upfront, and drive compliance through strategic resource investment that is balanced with the risk.
• We will discuss an approach to help move companies towards active compliance, enabling each of us to build a solid foundation on which to reduce the threat opportunity and most importantly: Move the Needle.

IT 213

#P30

P30: Software License Compliance & Vendor Management: Why It's Mission-Critical To Reputation & Cybersecurity, 10 Reasons It's Hard (& Getting Harder), & 10 Action Tips For You & Your Team Henry Jones, Owner, Law Office of Henry W Jones III & Intersect Tech. View Description

• Non-Compliance, Now: How Traditional Purchasing & IT Processes + Vendor & Technology Changes Have Landed Nearly Every Entity In Contract Breach, Copyright Infringement, & Security & Reputation Risk
• Digital Dependency Reduction & Organizational Quality Control: Best Practices: Recommended, Rank-Ordered Action Items For Compliance Professionals To Help Purchasing, IT & Other Colleagues See & Fix Software License Compliance
• Get To Not Just Yes & Fixed, But Also Thank You: Tips For Software-Specific Change Enablement, Quantification, Persuasion, Charm, Evidence, Appreciation, Budgeting, & Career Benefits

IT 221