Best Practices for Data Privacy Breach Response: Lessons Learned from Social Media Case Studies

Описание: Anne Connell (Carnegie Mellon University, US), Lauren Cooper (Carnegie Mellon University, US)

Anne Connell is a member of the technical staff at Carnegie Mellon University (CMU). Anne has over 20 years of experience in software development, privacy program development, resilience management, and instructional design. Anne’s research focus is to address privacy and cybersecurity concerns in a manner that protects organizations as well as individuals and complies with regulations. Anne’s contributions include framework development for implementing privacy standards, creating methodologies for cybersecurity assessments, data breach incident response, and social media risk, and building custom cybersecurity training solutions. Anne holds certifications in CISSP and CIPM. Anne is an instructor of Privacy in the Digital Age at the CMU Heinz College of Information Systems and Public Policy, and is an active speaker on youth online safety and social media. Anne holds a bachelor's degree in Information Systems and a master's degree in Human and Computer Interaction from Carnegie Mellon University.

Lauren Cooper is a member of the technical staff at Carnegie Mellon University. She began her career in IT operations, before shifting her focus to information security. She earned her MS in Information Security Policy and Management from Carnegie Mellon University, where she was a Scholarship for Service awardee, a competitive scholarship program sponsored by the United States government. Her favorite areas of research include privacy, community approaches to cybersecurity, security of 5G and future networks, cybersecurity strategy, security by design in complex systems, and understanding and integrating human factors in security and privacy.
--
Organizations employ social media platforms for a variety of communication purposes, including sharing industry news and generating website traffic. According to the Pew Research Center News Platform Study, 6 percent of U.S. adults say they at least sometimes get news from social media. The almost instantaneous speed of social media to reach a broad audience makes it a communication outlet well adapted for dissemination of information about data breaches and response status, as well as for combatting misinformation. Many threat actors have found success manipulating social media to target organizations with the intent to damage, disrupt, or destroy trusted communications channels, brand reputation, or financial standing. Communication on social media about an organization's data breach or disclosure can have far-reaching consequences. Management's understanding of how to navigate the aftermath of such a breach is essential to its success in preserving and building the organization's real-world reputation and security. In this presentation we will spotlight case studies using evidence gathered from social media, and conclude with specific and practical data breach incident response recommendations (best practices) how organizations can address data privacy breaches and disclosures proactively.