ISSA Journal Settembre 2018

Principali articoli del numero di Settembre 2018 di Issa Journal, la rivista mensile riservata ai Soci AIPSI:

• How Cybersecurity Teams Can Support and Facilitate Compliance with the GDPR, by Grace Buckler - ISSA member, National Capital Chapter. The General Data Protection Regulation (GDPR) gives residents of the European Union control over their own personal information regarding how organizations are allowed to collect and handle their private data. This article discusses how security teams can contribute to compliance efforts right away and long-term.

• The Brave Old New World of Privacy, by Steven J. Ross and Robert G. Parker. New privacy laws and regulations have not changed the enduring principles and requirements for privacy. These laws have not eliminated the greatest threats to privacy today: poor design of information systems, the absence of a culture of privacy, and cyberattacks.

• On the Effects of Enterprise Security on Employee Privacy, by Amn Rahman and Ashish Gehani. Employees sync apps across personal and work devices, resulting in commingled data entering enterprise backups. Further, employee-monitoring tools collect information about individuals' system use that is also archived. The authors identify resulting harms to both employees and employers and suggest solutions that help meet the needs of both stakeholders.

• The Art of Pushing Left in Application Security, by Kelley Bryant - ISSA member, Puget Sound Chapter. This article outlines the importance of integrating security activities into the software development life cycle in today's corporate marketplace.

Nelle rubriche della Rivista:

• Sabett's Brief
• Privacy - At What Price?
• Herding Cats
• Delete Me
• Crypto Corner
• Unintended Consequences of Marketing
• Open Forum
• Waking Up to New Consumer Data Privacy Protections
• Security in the News
• Association News
• ISSA Conference Highlights
• HACK ISTANBUL 2018
• News from the Education Foundation
• CISO Forum
• Member Benefit: 20% Discount on Professional Development Programs Offered by the InfoSec Institute
• ISSA CISO Virtual Mentoring Series
• ISSA Conference
• Securing Tomorrow Today
• Book Review
• Digital Relilience
• Career Center