Data Security and Privacy with the Privacy Professor

Latest Episodes:

Voting Security, Malware as Art, Ransomware, Breaches plus More May 21, 2019

Show notes

This week many security and privacy topics are covered, plus news about a necessary summer break! • Why are actual voting machines, with voter data, being sold on eBay? • What are cybercrooks doing on Git repositories that those using them must be prepared for? • How are the “6 most destructive malware threats” considered to be art? • How are organizations, and so many cloud services, exposing personal and sensitive data to the world? • What is going on with all the ransomware and phishing attacks? • Are ransomware response solutions providers causing more ransomware? • Why is Rebecca taking a break from the show over the summer? Tune in to hear Rebecca discuss these topics and more.

Security and Privacy Careers Opportunities, Advice and Experiences May 14, 2019

Show notes

Information security, privacy and compliance careers are of great interest, and the need for more professionals to fill openings in these areas continues to increase. • What are some paths to take for getting into these careers? • What types of college degrees, if any, are necessary? • What work ethics are necessary for success in these types of careers? • How is getting into these careers different in various countries, such as in the USA and Russia? • What is necessary to start your own business specializing in cyber security, privacy, and related services and products? • What is Women in Security and Privacy (WISP) and how did it get started? Tune in to hear Rebecca discuss these topics and more with Elena Elkina, co-founder/Partner of Aleada Consulting and co-founder of WISP.

Cybersecurity Lessons from the Mueller Report May 07, 2019

Show notes

All 50 US states were targeted by hackers in the 2016 elections. Some claimed a few of the hacks successfully broke into voting systems. The 448-page Mueller Report contains many important points & findings, not only about these hacking activities & related intelligence operations against the USA elections processes and voting machines and systems, but it also points out many cyber security vulnerabilities & threats leaders need to address for voting machines & elections processes. • How long has nation state intelligence activities been occurring? • How many activities been launched through the internet & directly against computing devices and systems? • Are Russian elections hacking/tampering tactics different from USA & other countries' activities? If so, how? • What is the weakest link in voting & elections systems security? Tune in to hear Rebecca discuss these topics and more with Christopher Burgess, a 30+ year veteran of the CIA and information security expert.

Small Business Risks, Careers, Mueller Report, CPU Vulns and More! Apr 30, 2019

Show notes

In this episode Rebecca answers some of the questions received from show listeners and discusses some recent news items. A very wide range of topics are covered, some of which include: • What are cybersecurity lessons found within the Mueller report? • What are the top 3 things a small business owner should be doing to secure client data? • Who should be concerned about Embedded POSReady 2009? • What are the challenges to eliminating CPU vulnerabilities from Spectre and Meltdown? • What are the best paid information security careers? • How can consumers deal with increasingly frequent credit card breaches at online sites? • What is a new Microsoft security configuration baseline setting that surprised many? Tune in to hear Rebecca discuss these topics and more.

Hotel Data Security and Privacy Apr 23, 2019

Show notes

There are growing concerns about privacy and the security of data provided to hotels, along with increasing safety concerns. • How many different entities get your personal data when you check into a hotel? • How many third parties have access to your personal data through the hotel? • What types of activities that you do in your room that are often put into the hotel system? • What types of actions can hotels take to help them improve their systems and data security and better protect the privacy of their guests? • What are the most challenging requirements within regulations such as the EU GDPR and California CPA for hotels to meet? • What are a few tips for travelers for protecting their own privacy? Tune in to hear Rebecca discuss these topics and more with Chris Zoladz, founder of Navigate LLC and former VP of Information Protection & Privacy at Marriott International.

China Tech, Reusing Old Devices, Accessing Patient Data and More! Apr 16, 2019

Show notes

In this episode Rebecca answers some questions received from show listeners and her Privacy Professor Tips readers. A wide range of topics are covered, such as: • How many voting machines were attacked during the USA 2016 elections? Will they continue? • Should listeners be concerned that wireless China tech may have surveillance built in? Or tech from other countries? • What happened at Mar-a-Lago with the USB thumb drives with malware them? • What happens to patient data when a clinic closes? • What are red flags that popular tech gadgets, like iPads, have security problems? • Is it safe to give children old phones or other tech to use? • How can people tell if skimmers are in ATMs or self-pay devices? • How can locations for those using Gmail or other email services be removed? • What popular retail check-out system is no longer being supported, leaving millions of retailers & their customers vulnerable? Tune in to hear Rebecca discuss these topics and more.

GDPR: Implementing Data Subject Access and Rights Apr 09, 2019

Show notes

In this 6th in a series of shows on GDPR we discuss issues about how to give individuals access to their own personal data, how to provide them with portability of their personal data, and related issues. Understanding the actual HOW of doing compliance requirements is usually the most challenging part of compliance. One factor is because each organization has its own unique business environment, so the HOW cannot be the same for all organizations. This show explores Articles 15, along with some of Articles 17 and 20, of GDPR. • What penalties and fines under GDPR have been applied to date? By what countries? • What are the most challenging parts of meeting GDPR compliance? • What types of data do organizations need to provide to individuals upon their request? Does such data include meta data? Log activities? Other information? Tune in to hear Rebecca discuss the answers to these questions and more with Steve Wright, privacy and GDPR expert.

Continuing the Cannabis Security and Privacy Risks Conversation Apr 02, 2019

Show notes

This is the third in a series of shows about personal data privacy and security risks involved with cannabis sales. We discuss wide-ranging issues involved with cannabis dispensaries and online cannabis sales. We also discuss some of the ways in which smartphones, apps, and other tech can bring risks to those using cannabis. • Where is cannabis legal throughout the world? • How are cannabis laws creating stigmas for those using medical cannabis? • How are the wide number of personal data items collected from cannabis customers and patients put at risk? • Is 90% of stolen cannabis patient/customer data really taken by insiders? • Are patients using THC at more or less risk of data theft, or privacy harms, than those using CBD? What are the differences? Tune in to hear Rebecca discuss the answers to these questions and more with Michelle Dumay, cannabis industry privacy and security expert, advocate and advisor.

Fax Tech and Machines: The Achilles Heels of Cybersecurity Mar 26, 2019

Show notes

A California healthcare cloud services business exposed over 6 million patient files online due to lack of basic security controls, such as passwords, on their online fax server. Many organizations have unsecured faxing services as well. And to the surprise of many, faxing is growing in usage, increasing data security & privacy risks. Legacy systems & devices, such as fax servers & machines, become the Achilles' heels of systems, applications & data security. • How many cyber crooks are getting to personal data through these pathways ignored by large numbers of businesses? • What are common security & privacy problems with how businesses & the public in general use faxing, printing & copy services? • What types of breaches are occurring? • How can these often-overlooked pathways into data, systems, applications and networks be secured? Tune in to hear Rebecca discuss the answers to these questions and more with Eric Nelson, Founder and Principal of Secure Privacy Solutions.

Childrens Online Cyberbullying, Privacy and Cybersecurity Mar 19, 2019

Show notes

Too many children go online without realizing the security and privacy risks. Most parents and teachers do not provide enough guidance to children about online security, privacy, and cyberbullying. We all, as a society, need to do a better job at addressing children’s online risks. • How have online cyberbullying & cybersecurity risks evolved over the years? • What are some real-life examples of children being physically hurt as a result of their online activities? • What are the weakest links that bring security & privacy risks to children online? • Who are schools’ underappreciated superheroes helping children reduce online safety and privacy risks? • Does Section 230 under the Communications Decency Act hurt or help children's online safety & privacy? • How can we get the power of the internet without the perils of the internet? Tune in to hear Rebecca discuss the answers to these questions and more with Parry Aftab, The Kids’ Internet Lawyer.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Data Security and Privacy with the Privacy Professor

Related Podcasts

Links

Stay Connected