AusCERT is hosting AusCERT2015, the 14th annual AusCERT Information Security Conference from 1st-5th June 2015 at the RACV Royal Pines Resort on Queensland's Gold Coast, Australia.
This year’s conference will explore how we need to smarten up to manage information security risks better. We need to “smarten up” by focusing on information security essentials; by taking advantage of threat intelligence to improve our security posture; and by adapting and applying smarter ways to prevent, detect and respond to information security risks.
Privacy for sure is more about politics than technology, and yet the professional practices of information security and privacy have more in common than first meets the eye. They really are the opposite sides of the same coin. If you think of identity management as what you need to know about someone in order to deal with them, then privacy is what you don’t need to know.
We should not sugar-coat privacy – it really can be at odds with security, usability, cost, and revenue opportunity. And just as there is no such thing as perfect security, we cannot have perfect privacy either. This sort real world mindset helps security professionals make better sense of privacy regulations. Engineering is all about trading off competing requirements, and so “privacy engineering” should bring privacy tensions to the surface and resolve them systematically. Security professionals also deal well with uncertainty. So despite the ambiguities in the law, privacy principles can be dealt with in much the same way as information security.
This Masterclass will bring everything you need to know about privacy into plain view. It will equip security practitioners and other IT professionals to work effectively with the privacy function, and will help you to avoid a range of common privacy snags.
Follow Steve Wilson on Twitter @Steve_lockstep
