Data Security and Privacy with the Privacy Professor

Latest Episodes:

Security Views from an Elections Official and Voting Security Expert Oct 23, 2018

Show notes

Almost every day there are more reports of voting security problems. Voter registration data being sold on the dark web for $12,500 for certain states. Ballot case security being defeated and not leaving any trails to track the hackers. Voter suppression through mismatches of IDs and registration data. The list could go on for many pages. What legal requirements are there in the USA for voting and elections security? What responsibilities do elections officials have to ensure voting security? Do officials and poll workers receive information security training? What security and privacy concerns are there for voting via email, fax, web portals, and mobile apps? What risks are at the polling sites? What security risks exist for voter registration cards? How can voting and elections security be improved? Join Florida election official, and voting security expert, Genya Coulter, and me as we discuss these, and more, related topics.

Answering Questions from Listeners for Cyber Security Awareness Oct 16, 2018

Show notes

I’ve accumulated dozens of data security, cyber security and privacy questions from listeners and Tips readers that I’ve not yet had time to answer. They cover a very wide range of topics of interest to all folks throughout the world. E.g. E911. HIPAA breaches. Worst security business practices. Ring security system privacy. Keeping people from visually snooping on your tablet or phone. Phishing calls (with a real example recording). Credit reports. Virus Scanning. And much more! We will answer questions on these topics and more during this episode as part of Cyber Security Awareness Month! Join cyber security expert Dr. Terri Curran and me as we go through as many questions as possible during this hour.

Pen Tests and Vulnerability Scans: Advice, Experience and Case Studies Oct 09, 2018

Show notes

The terms “vulnerability scanning,” “vulnerability assessments” & “penetration testing” are often used interchangeably. But they are not the same! What are the benefits of each? For what purposes should each be used? Are they required by law? Are there any negative impacts for each type of activity? Listen in as cyber security expert Kevin Beaver discuss these topics, his experiences and advice, and also hear us go through some related case studies for using these tools.

Turning A Blind Eye Does Not Fix Voting Security Vulnerabilities Oct 02, 2018

Show notes

The sheer number of different voting & elections systems and applications used in USA elections is staggeringly large and diverse; as they are in other countries. The number of people involved in elections is also a significant factor impacting elections security, along with physical access security to the voting equipment, paper ballots, and registration data. The resulting complexity creates many real voting security issues that must be addressed. Voting machines vendors should embrace help to identify risks, not simply deny risks exist. In this 4th in a series of voting security shows, we look at the findings from the “Voting Machine Hacking Village” at DEFCON, state-level cybersecurity election plans, current voting & elections security vulnerabilities, and nation state elections hacking activities. We also answer key questions about mobile voting and paper ballots. Listen in as I discuss these topics & more with Jake Braun, Executive Director of the Harris CPI & CEO of CGA.

Encore: Are Encryption Backdoors Really Necessary for National Security? Sep 25, 2018

Show notes

On August 30 it was widely reported that 5 Eyes intelligence security allies ? Australia, Canada, New Zealand, Britain & USA ? were working together to force tech companies to provide backdoors to encrypted data. We all want terrorists and criminals caught. But is putting backdoor access to encrypted data files actually the only way to solve cases where encrypted data is involved when other methods are available to get intelligence information? Those who want backdoors must understand there other methods available to obtain access to encrypted data instead of putting backdoors into the technology. With so many encryption technologies available from other countries backdoors wouldn?t stop terrorists from using encryption. What are some important issues that should be considered for putting backdoors into encryption technologies? Listen to this encore episode discussion with a world renowned senior cybersecurity leader and expert! For more details after listening see USACM?s statement on extraordinary law enforcement access at: https://www.acm.org/binaries/content/assets/public-policy/usacm/2018-usacm-statement-law-enforcement-access.pdf.

Cyber Terrorism Defense at Home and While Traveling Sep 18, 2018

Show notes

There are growing numbers of cyber-attacks being launched by terrorists throughout the world against critical infrastructure networks not only within governments, but also within the healthcare, financial, utilities, and transportation industries, just to name a few. The US Department Homeland Security said during a 2018 9/11 memorial event that, ?The cyber threat has eclipsed the threat from physical terrorism.? What is cyber terrorism, and how do cyber terrorists choose their victims? What factors lead to cyber terrorists targeting travelers? How can you keep cyber terrorists from your data and systems? How can data security be used during hostage situations? Listen to Tom Conley is President & CEO of The Conley Group, discuss the answers to these questions, and other issues related to domestic and international terrorism and travel security.

Voting Systems Security and Risk Limiting Audits Sep 11, 2018

Show notes

US intelligence agencies confirm that during the run-up to the 2016 elections Russian hackers attacked DNC & RNC election & related servers. Digital attacks on voter registration servers occurred in all states & in a few isolated cases hackers got into voter records servers. Voter fraud at polls is verifiably low, but voting & elections systems have significant security vulnerabilities due to wide diversity of systems & administration practices throughout all the USA, along with risks from varying ages of systems used. What are security risks in voting systems, software & tech currently used in the USA? How is social engineering used in attempts to voting systems? How can risk limiting audits be used to assure voting integrity? Listen to Marian Schneider, President of Verified Voting, discuss her organization’s research findings for voting systems & explain risks in current voting systems, and risky practices, such as how voting is occurring in some places via email and fax.

The Philippines BPO Industry Goal to be World Leader in Privacy Sep 04, 2018

Show notes

There are many security & privacy issues related to business process outsourcing (BPO) in general, and to contact centers in particular. The Data Privacy Asia conference (www.DataPrivacyAsia.com) in Manila, Philippines, Sept 19 & 20 will provide advice for how to effectively address those issues. There are many key issues organizations must consider when contracting contact centers: access controls to personal data, ensuring compliance with necessary legal requirements, how caller identities will be confirmed, breach response practices and details, and many more. Organizations need to know that contact centers are effectively addressing privacy and data security risks and compliance requirements. Listen in as Espie Bulseco and Tonichi Parekh discuss the growing BPO industry in the Philiippines, and in particular the actions being taken to put the Philippines at the forefront as the recognized leader in protecting data and privacy in not only Asia, but throughout the world.

Advice for CyberSecurity and Privacy Threats, Challenges and Careers Aug 28, 2018

Show notes

Are you interested in expanding your career in the infosec & privacy fields, or want to get started in professions in these areas, or start a new career after leaving another industry? This episode is one you’ll want to listen to! • What are the challenges information security, privacy, compliance & audit practitioners (aka information assurance pros) face advancing their careers? • How are they meeting these challenges? • How do information assurance professionals stay up to date with the latest threats and vulnerabilities? • What are the benefits of working in information assurance careers in Midwest USA? (There are MANY!) Listen in as Donna Gomez and Naeem Babri, information security experts in the greater Kansas City, MO/KS area, answer these questions and discuss key related topics. They will also provide information about the upcoming SPOTlight on Security workshop in Overland Park, KS, on September 5 (https://kcissa-spotlightonsecurity.blogspot.com/p/welcome.html).

Unifying GDPR With US Laws Compliance Aug 21, 2018

Show notes

Organizations are struggling to meet compliance with GDPR, USA regulations & laws & all the other worldwide data protection legal requirements. There is much confusion about how to effectively comply with all of the many laws & regulations that apply to any single organization. • What are hot topics that organizations need to know about for GDPR compliance? • How can organizations effectively comply with multiple laws & regulations that cover the same topics & are often in conflict with requirements? • How should differences in legal requirements for breach response be handled? • How should organizations provide personal data to those making requests? • How should organizations approach complying with the conflicting requirements within the 99 articles of the GDPR? Listen in as Matthew McKinney and Thomas Story, attorneys with BrownWinick (www.BrownWinick.com) and experts in these areas, discuss and provide important points and valuable tips for some of the key related topics.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Data Security and Privacy with the Privacy Professor

Related Podcasts

Links

Stay Connected