lessons learned from a breach
Download
Skip this Video
Download Presentation
Lessons Learned from a Breach

Loading in 2 Seconds...

play fullscreen
1 / 59

Lessons Learned from a Breach - PowerPoint PPT Presentation


  • 64 Views
  • Uploaded on

Lessons Learned from a Breach. Eric van Wiltenburg University of Victoria @ e_vanwiltenburg. Let’s start with some exercise. Hey Eric, aren’t you embarrassed?. “Transparency is an asset.” Eric van Wiltenburg, January 31, 2012. OK, so what happened anyway?. +. +. =. 11845.

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about ' Lessons Learned from a Breach' - nijole


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
lessons learned from a breach

Lessons Learned from a Breach

Eric van Wiltenburg

University of Victoria

@e_vanwiltenburg

slide4

“Transparency is an asset.”

Eric van Wiltenburg, January 31, 2012

slide24

employee names

  • employee numbers
  • Social Insurance Numbers
  • bank account
  • employee classification code
  • amount of last deposit
slide25

January 2012

January 2010

lesson
Lesson
  • Having good policies in place is very important, even if nobody reads them
slide31

University Secretary

  • Vice President Finance and Operations
  • Manager Privacy, Access and Policy
  • University Legal Counsel
  • Information Security Manager
  • Director, Communications
  • Associate Vice-President Human Resources
  • Associate Vice-President Faculty Relations
  • Assistant Director, Campus Security
  • Executive Director, Government Relations
  • Vice-President External Relations
  • Assistant Treasurer
  • Risk Analyst
slide32

FIPPA

OIPC

lesson1
Lesson
  • Effective external communication to {organization, staff, community} is important for {salvaging reputation, reassuring affected individuals, ensuring resolution}, even if the internal politics, communications and logistics cause friction.
regular bulletin updates
Regular bulletin updates
  • Information sent to current and former UVic employees, Jan. 9, 2012
  • Letter from Vice-president Finance and Operations Gayle Gorrill, Jan. 10, 2012
  • A message from President David Turpin, Jan. 11, 2012
  • Jan. 12, 2012 update
  • Jan. 13, 2012 update
  • Jan. 19, 2012 update
  • Jan. 20, 2012 update - Launch of review
  • Jan. 23, 2012 update - Phishing attacks & fraud investigation
  • Jan. 25, 2012 update - Preliminary report to board
  • Jan. 27, 2012 update - Agreement reached on Credit Monitoring Service
  • Jan. 26, 2012 update - Saanich police release info
  • Feb. 3, 2012 update - Credit monitoring service available Monday
  • Feb. 6, 2012 update - Credit monitoring instructions
lesson2
Lesson
  • Bad guys and gals know how to read the news
lesson3
Lesson
  • Understand what “reasonable security arrangements” are
lesson4
Lesson
  • If you don’t need it, get rid of it (or don’t collect it).
  • Data minimization
lesson5
Lesson
  • Effective project management helps ensure the last mile is completed.
lesson6
Lesson
  • Keeping momentum once the storm blows over can be difficult
lesson7
Lesson
  • Centralized command and control for privacy and security is necessary, even in a decentralized environment
lesson8
Lesson
  • A crisis can be a platform for change
lesson9
Lesson
  • Having good policies in place is very important, and everybody should read them
remember
Remember…
  • It’s not IF you’re going to have a breach, it’s WHEN you’ll have a breach and HOW you respond to it and what you LEARN from it that really matters.
ad