Time and again, we as consumers read about the latest significant data breach, and we feel a familiar disappointment. Disempowered, helpless, without recourse. Angry for being treated like a commodity. Frustrated that nothing's likely to change.
On the other side of the coin, as security practitioners and businesspeople, we have lost sight of our stakeholders' perspectives -- our customers, investors, regulators, and others affected by the success or failure of our work. We focus on specific items like strengthening controls and obtaining compliance certifications, but what we miss is that the single most damaging thing to many companies has been a loss of TRUST.
I’ll share my experiences leading the security programs of some of the world’s preeminent companies through times of great change – situations where their response to adversity or a growth opportunity colors their long-term reputation. We’ll explore how companies, like people, develop a character, and that a key determinant of that character is their approach to security and privacy. And we’ll see how this character can lead to, or away from, earning trust. Finally, we’ll consider several major industry happenings over the past few years as examples of companies who have successfully (and unsuccessfully) navigated times of transformative change.
It's clear that the pendulum is swinging toward giving consumers more control over their relationships with firms, with watershed changes like the so-called "right to be forgotten", the EU GDPR, and most recently the California Consumer Privacy Act. Firms have to act quickly and decisively to build trust with their stakeholders, or else face lost customer preference, strict regulation, and other business-leveling outcomes.
Security practitioners have a uniquely valuable role to play in leading and supporting a company’s ability to maintain trust. Come learn about the next evolution of security’s role in business and society, and practices you can take back to champion trust within your organization.