A presentation at @ISACASTL 10-16

1. The great debate:
Security vs. Privacy
David Strom
@dstrom
ISACA keynote
October, 2016

2. Here is the choice:

4. Agenda
• Notable privacy failures
• Suggested solutions
• Scary things from today’s current events
• Some key takeaways

5. Notable failures

7. This isn’t news

10. 10
How to get arrested
for your tweets and
pay thousands in
fines
http://strominator.com

11. http://strominator.com 11
3/11, he Tweeted
10 jokes making
fun of the Japanese
after the tsunami –
AFLAC fired him as
their rep

21. Speaking of vans…

24. Suggested solutions
• Privacy by design
• Can you protect your most sensitive data?
• Anonymous vs. private information
• Understanding privacy policies of Google et al.

26. PbyD: 7 point plan
• Be proactive
• Do it by default
• It is a win-win
• Include from the start
• End-to-end security very important
• Let the sun shine in
• Keep it user-centric

32. Privacy vs. anonymity

41. Just some of the conditions
We retain the personal information you provide while your account is
in existence or as needed to provide you services. We may retain
your personal information even after you have closed your account
if retention is reasonably necessary to comply with our legal
obligations, meet regulatory requirements, resolve disputes
between Members, prevent fraud and abuse, or enforce this
Privacy Policy and our User Agreement. We may retain personal
information, for a limited period of time, if requested by law
enforcement. We may also disclose your personal information to a
third party as part of a sale of the assets of LinkedIn Corporation, a
subsidiary, or division, or as the result of a change in control of the
company or one of its affiliates, or in preparation for any of these
events. Any third party to which we transfers or sells our assets will
have the right to continue to use the personal and other
information that you provide to us in the manner set out in this
Privacy Policy.

58. Scary things about
security and
privacy from
the present day

60. Mother Horrified to Learn Hackers Put
Live Feed of Daughters' Bedroom Online

62. Progressive Insurance’s
Snapshot Device
What we use to calculate your Snapshot result:
• Hard braking
• Amount of time driven
• Time and day
• Fast or jackrabbit starts
• Trip regularity

65. Vs.

71. http://strominator.com 71
Good luck and stay safe!
David Strom
(314) 277-7832
david@strom.com
Twiiter: @dstrom
http://strominator.com
Slides available:
http://slideshare.net/davidstrom