Doug Knehr
CISSP, FIP, CIPM, CIPP/US, JD, MBA, BS
609-***-**** *************@*****.*** https://www.linkedin.com/in/doug-knehr/ Portfolio: https://dougknehr.wordpress.com/
GOVERNANCE, RISK & COMPLIANCE-DRIVEN CISO (DPO, CPO, AI SME)
INFORMATION SECURITY GOVERNANCE, DATA PROTECTION, PRIVACY, AI GOVERNANCE
Differentiators:
Information Security + Privacy + AI Governance
CISSP + (IAPP- FIP, CIPM, CIPP ) + Expertise gained in AI, ML/Analytics @ 10 Multinational orgs)
Cross-functional SME skill set: CISO (Chief Information Security Officer - Governance GRC driven)
CPO (Chief Privacy Officer)
DPO (Data Protection Officer)
AI Governance SME.
Past programs matured: Yahoo, CSWG (Albertsons Krogers Spinoff), Infosys, DTCC, Santander, Avanade, Acoustic, Mondelez, Clorox, and Lucira Health
Continuous learner: Training- See the complete list of 300+ security, privacy & AI training attached in the training portion of my resume
Recent Accomplishment: $26 Billion Merger
With over a decade of experience across 26+ platforms, gained from maturing 10 security and data protection programs, my ability to align technology initiatives with business objectives and not just advise to but operationalize these programs is at such a level of mastery within information security, privacy and AI governance that in the last 3.5 months of 2024, while under FTC, court, seller, and executive M&A team scrutiny, for the largest merger in the USA in Nov 2024 ($26 billion), I designed and directed the operationalizing of 26 platforms for information security governance, data protection, privacy, incident response and a future ML/AI governance program for a 600-location acquisition developing people, processes, technologies, and budget, website functionality as well as full back-office processes, managing the activities of 2+ global consulting organizations and 3 firms.
Value Statement: I have a 10-time proven ability to operationalize security programs across 33 domains with particular expertise in information security governance, GRC controls, 16 domains of privacy, Microsoft-driven data protection, and AI governance. I’ve designed and run programs in harmony, at scale, across over 100 countries, serving more than 36,000 employees in highly complex enterprises. I possess an in-depth understanding of leading cybersecurity frameworks and certification requirements, and I am a control Governance Risk and Compliance (GRC) expert (both technical and non-technical) in development across enterprise functions that impact cybersecurity, information security, data protection and privacy compliance.
AWARDS
DPO Group Avanade 2019 Data Protection Officer Rockstar Award
CISO Group Avanade 2019 CISO Incident Response Superhero Award
EDUCATION
Degree-JD, School-Stetson (Doctoral Degree)
Degree MBA, School-Rutgers Graduate School of Management
Degree-BS, School-Rutgers University Cook College, NJ
CERTIFICATIONS, FRAMEWORKS, TRAINING
Cybersecurity Certifications:
Certified Information Security System Professional (CISSP) 2015
Cybersecurity Trainings
See hundreds of security trainings in the trainings section at end of the resume
Privacy Certifications:
IAPP-Fellow of Information Privacy (FIP) 2017
IAPP-Certified Information Privacy Manager (CIPM) 2014
IAPP-Certified Information Privacy Professional (CIPP/US) 2014
Privacy Trainings
OneTrust: Assessment Automation Expert
OneTrust: Consent & Preference Management Expert
OneTrust: Data Mapping Expert
OneTrust: Data Discovery Expert
OneTrust: Assessment Automation Expert
OneTrust: Data Subject Requests Expert
OneTrust Incident Response Expert
Nymity Trust Arc – significant training over 10 years
See numerous privacy trainings in the trainings section at end of the resume
AI Artificial Intelligence and ML Machine Learning Certs & Trainings
See numerous AI training in the training
doc
Security framework expertise: NIST 800-53, ISO 270**-*****, 27701:2019, NY Shield, NYDFS 500, OWASP,DORA,
NERC, Breach and Attack Simulation MITRE ATT&CK framework
Privacy framework expertise: EU(GDPR + EU regs), USA (CCPA, CPRA, VCDPA, UCPA), PCI, CAN-SPAM, TCPA, CASL, Privacy Shield, HIPAA
Technologies -Privacy: GRC: Archer, Metric Stream, ZenGRC, Unified Compliance Framework, OneTrust, Nymity TrustArc, DPOrganizer, Integris, BigID
Technologies-Cybersecurity BIGID, Microsoft Cloud Access Security Broker (CASB), QRadar, Radarfirst, Alation, Microsoft O365 Safety & Compliance Center, Azure Rights Management, Microsoft Purview and MS data protection technologies, Splunk, Sumo Logic
AI frameworks: NIST AI Risk Management Framework, EU AI Act, ISO 42001
EXPERIENCE
Position : V-CISO and V-CPO -Information Security Governance, Data Protection privacy, Incident Response
(Consultant)
Company: CSWG (Multi-billion $ US Merger/Sale Pre-Launch Efforts)
Dates: August 2024 to November, 2024
Key Accomplishments: 26 platforms budgeted and operationalized in 3.5 months
My ability to align technology initiatives with business objectives is at such a level of mastery within information security, data protection privacy and AI governance that during these 3.5 months, while under FTC, court, seller, and executive M&A team scrutiny, for the largest merger in the USA in Nov 2024 ($26 billion), I designed and operationalized the information security governance, data protection privacy, and incident response program for a 600-location acquisition, developing people, processes, technologies, and budget, website functionality as well as full back-office processes, managing the activities of 2+ global consulting organizations.
TOM-Create target operating model for data protection,security grc and policy, incident response and privacy
Resources-Create resource plan and functional relationship plan
Platforms-Develop and begin implementation of 26+ platforms for information security governance, privacy and data protection effecting change management and innovation
Selected and operationalized security GRC tooling and begin control implementation for alignment with WISP and CMMC leveling
Strategized and drafted the following:
Written Information Security Program
Integrated Incident Response Program and playbooks
Integrated Incident Response Program documentation and playbooks
Data classification tables
Data Privacy Program documentation
Created GRC control foundation and policy development for the following:
Cybersecurity Business Plan
Continuity of Operations Plan
Cybersecurity Risk Assessment Template
Cybersecurity SCRM Strategy & Implementation Plan
Cybersecurity Operating Procedures
Information Assurance Program
Risk Management Program
Secure Baseline Configurations
Secure Engineering & Data Privacy
Vulnerability & Patch Management Program
KPI development and extensive project management to meet business objectives in a hyper compressed time frame
Selected and operationalized a full privacy suite of technologies in OneTrust, Trust Arc and other platforms:
ROPA (Records of Processing Activities)
Cookie preference
Consent and preference management
PIA, DPIA, LITs
Data protection technologies (Microsoft)(data sensitivity classification, data discovery, data labeling, data loss prevention)
Retention and data classification platforms
Aligned HIPAA privacy practices documentation, HIPAA, NPP, consumer-facing CCPA, CPRA compliant privacy statement, HR candidate privacy statement, applicant privacy statement and just-in-time consent disclosures with security and privacy program
Position : Principal SME- Cybersecurity (Forensic Stage Contract)
Company: Infosys Ltd
Dates: January 2024 to March, 2024
Location: City-Remote, State-NJ
Key Accomplishments: Brought the org through the forensic stage of cyber event in 3 months
Advising during the specific initial 3-month period of crisis focused on post-breach crisis management security and privacy efforts
Managing root cause analysis, data subject notifications (notice to data subject, contractual w/ clients, AG regulatory), CISO and enterprise communications as well as managing notification vendors
Advising on cyber litigation and privacy data breach driven SLA and contract claims and notification strategies
Contributing to knowledge needed for attorney general, regulator and securities exchange interactions
Management of forensics reporting artifacts and related disclosure strategies
Position :Principal SME- Cyber Risk, Data Protection, Privacy, AI Compliance, (Consultant)
Company: Yahoo
Dates: January 2023 to December 2023
Location: City-Remote, State-NJ
Key Accomplishments: New data protection privacy GRC program established and operationalized globally
Lead 95+ engineering teams to mature/establish a privacy and cyber risk and data protection controls GRC program via an enterprise-wide impact assessment and change management effort across Yahoo
Developed customized cyber risk reduction and data protection privacy engineering advisory across the Yahoo technical ecosystem with particular emphasis in data science, ML, AI systems
Continuous Improvement SME served as the subject matter expert (SME) collaborating with Legal, Compliance, CISO and AI/Analytics teams to mitigate privacy and data protection engineering control risk.
Critical advisory regarding cookies and technical identifiers with coming of cookie free future
Position: Data Protection Officer-(Interim)
Company: Lucira Health (Medical Device Startup) Dates: May 2022 to August 2022
Location: City-Remote, State-NJ
Key Accomplishments: Established new DPO and CPO functions in US and EU
Implementing a global privacy and data protection program from the foundation.
Managing the drafting of global Data Transfer Addendums, Standard Contractual Clauses, Privacy Statements, and Cookie Notices.
Overseeing multi-country outside counsel and provided product counseling for the multi-country launch, ensuring compliance with regulations such as HIPAA, GDPR, CCPA, PIPEDA, and local privacy laws.
Product counseling for multi country launch (HIPAA, GDPR, CCPA, PIPEDA, Aus, New Zealand, EU)
Served as the sole data protection security expert, creating budgets, and operationalizing various initiatives, including:
DLP (Data Loss Prevention) implementation.
Acting as a Microsoft Data Protection Subject Matter Expert (SME) and utilizing data protection technologies.
Implementing MCAS (Microsoft Cloud App Security) privacy measures.
Conducting data discovery and managing SIEM detection for insider threat data protection.
Establishing GRC (Governance, Risk, and Compliance) foundational programs and a WISP (Written Information Security Program).
Addressing security obligations under Standard Contractual Clauses and distributor agreements.
Conducting HIPAA Security Risk Assessments and utilizing MS and AWS Safety and Compliance technologies.
Providing expert guidance to a 300-person company on NIST, ISO 27001, GDPR, CCPA, CPRA, PIPEDA, HIPAA, and local privacy and data protection laws.
Developing and operationalizing various privacy programs, and budget including:
Incident response program.
ROPA (Records of Processing and Inventory) program.
Cookie technology program.
Consent and preference management program.
Individual Rights Response program, including DSAR (Data Subject Access Request) lookup methodology.
Privacy and data protection research program.
PIA/DPIA (Privacy Impact Assessment/Data Protection Impact Assessment) assessment automation and mitigation efforts.
Data mapping and data flows.
Privacy program product launches.
Establishing both CPO (Chief Privacy Officer) and DPO (Data Protection Officer) offices.
Ensuring security representations in global data transfer addendums.
Drafting legal documents for lawful transfer mechanisms, including SCCS (Standard Contractual Clauses), DTA (Data Transfer Agreements), and DPPs (Data Protection Provisions).
Implementing a retention program (technology and methods).
Utilizing Trust Arc and OneTrust as subject matter experts.
Generating Alation data catalog.
Providing guidance to various business groups on privacy concerns.
Utilizing Big ID for data discovery and policy generation.
Position:Data Protection & Privacy (SME) to CIO & GC(Consultant)
Company: The Clorox Company
Dates: April 2021 to March 2022
Location: City-Remote, State-NJ
Key Accomplishments: Created a multiyear work plan for privacy and data protection in Target Process Online for CTO
Privacy & Data Protection
Advising and participating in the complete rebuilding of the privacy program in Target Process Online.
Acting as the sole privacy SME, focusing on maturing the technical implementation and engineering underpinning of privacy and data protection within Target Process models.
Implementing privacy processes as an SME and effectively as the Chief Privacy Officer (CPO), including the Privacy Operating Model.
Drafting cyber risk policies, standards, and controls that integrate privacy with information security and data protection controls for the CTO, GC, and CISO teams
Position: Principal Cyber Risk Privacy Subject Matter Expert-(SME To CISO(Contract))
Company: Mondelez International
Dates: July 2020 to February 2021
Location: City-Remote, State-NJ
Key Accomplishments: Created a new control paradigm for the entire org to be managed by the CISO team
Privacy
Advising and participating in the maturing of the privacy program at the domain and control level.
Maturing an international Privacy program for the CISO by developing innovative standards, controls, procedures, and metrics that implemented a global privacy framework tied to data security frameworks, resulting in a comprehensive program tailored to the organization.
Creating innovative Schrems II solutions by leveraging unique security and privacy framework GRC (Governance, Risk, and Compliance) methodologies.
Advising on the launch of a consent and preference management platform and maturing the Incident Response program.
Drafting policies, standards, and controls for the privacy program.
Cyber Risk
Developing cyber risk governance maturity modeling (COSO) and risk quantification for the CISO and Board of Director committees
Drafting policies, standards, and controls for the security program.
Policy, standard, control drafting for security program
Position: Chief Privacy Officer – Interim (Contract)
Company: Acoustic (Ad Tech MarTech)
Dates: December 2019 to January 2020
Location: City: New York City, State-NY
Key Accomplishments: Started privacy data protection program for a start-up ad tech organization
Designed global data protection and privacy programs for a private equity startup, focusing on implementing controls aligned with CCPA (California Consumer Privacy Act) and GDPR (General Data Protection Regulation) requirements.
Position: Senior Information Security Privacy SME
Company: Avanade Inc.
Dates: February 2018 to December 2019
Location: City-Remote, State- NJ
Key Achievements: SME to 24 country privacy data protection program for CISO & GC-1 of 3 privacy and data protection counsel to 36,000 employees
Awards: 2019 Data Protection Officer Rockstar Award
2019 CISO Incident Response Superhero Award
Privacy: Directly advised CISO, GC, DPO and all business units on privacy and data security frameworks – Significant Operational Expertise
Privacy Operations & Advisory
Expert development of 24 country Governance Risk Compliance (GRC) privacy program -1 of 3 SMEs (Small Team Greenfield Launch expertise)
Directly advised DPO, GC and CISO on operational privacy initiatives
Expert in GDPR, CCPA, ISO 27701:2019, NIST 800-53, NYDFS and a variety of global privacy and data protection frameworks
Privacy and data protection expert across EU and Americas negotiating and drafting commercial contracts including terms and conditions governing consumer data
Worked daily with product and security engineering teams proactively managing privacy and data protection legal risk
Guiding Data Protection and GDPR (General Data Protection Regulation) strategy implementation teams
ZenGRC, Onetrust, Nymity, TrustArc, SME. Significant expertise across a variety of data protection technologies.
Application of privacy-by-design principles, conducting and documenting privacy assessments, including data privacy impact assessments (DPIAs), legitimate interest assessments (LIAs), international data transfer adequacy assessments, and inbound and outbound privacy and security due diligence.
Created a 24 country jurisdictionally relevant trigger set against GDPR, CCPA, NIST, ISO to effect PIA, DPIA, DPbD
accounting for local country regulation, and the latest jurisdictionally relevant regulatory guidance
Due diligence reviews of regular flow-down assessments within privacy and information security domains to hold processors and sub-processors in compliance against negotiated terms,and served as data privacy expert to ensure flow-downs are current against global regulatory requirements.
Filtered the present state of data protection capabilities with the development of data protection protocols to baseline capabilities and rationalize the same against operating jurisdictions to enhance the speed of the contracting process and reduce compliance risk.
Utilized security monitoring tools, data discovery tooling, data classification tooling to meet privacy regulations and cyber regulatory regulations
Preparation to present security tooling to works councils
Privacy Data Protection & Drafting
Drafted consents, privacy notices, data transfer agreements and other documents for lawful transmission of data.
Drafted Legitimate Interest Tests, PIAs(Privacy Impact), DPIAs (Data Protection Impact Assessments)(including multi country implementing law compliance)
Policy, standard, control drafting for privacy program
Advised on BCR (Binding Corporate Rules), SCC (Std Contractual Clauses)
Modifying legal agreements (DTAs, Model Clauses, Contract Addendums, Notices, Policy)
Contract drafting of data protection protocols, MSA clauses with focus on privacy and security
Creating technologies internally to effect compliance and data protection regulation globally within the organization
Information Security, Cyber Risk & Incident Response
Advised CISO and GC on security frameworks, risk assurance as a SME and counsel for 24 subsidiary entities
Approved crisis management escalation handling for CISO
Guiding the CISO, GC and DPO to integrate GDPR data protection, privacy and cyber security regulatory operational and risk framework requirements into operations.
Cyber wargaming tabletop exercise planning
Resolved privacy and organizational cyber risk incidents internationally for incident response / breach response
Provided expert advice across all major departments international data protection events (incidents) across 24 countries
Risk Assurance and GRC
Expert development of 24 country GRC information security program -1 of 3 SMEs (Small Team Greenfield Launch expertise)
Expert in information security GRC and Privacy GRC (ZenGRC, Archer, Metric Stream, UCF)
Policy, standard, control drafting for security program
Leveraged ISO27701-2019 and Microsoft expertise to design jurisdictionally relevant governance rules including the use of Azure rights management and O365 Safety & Compliance center
Designed privacy and information security by design control sets including within cloud environments
Purple Team type cross functional expert between CISO, DPO, GC (Advised on penetration testing standards and red team / blue team efforts)
Resolved application security control issues and cloud OWASP resolution, especially within incident response handling
Compliance Center controls to effect international data protection governance across 23 countries
Built WISP (written Information Security Program) and data protection plans globally
Threat modeling guidance involving the Mitre Attack framework
Provided guidance on insider threat and detection/deterrents
Recommending technology and technology revisions based on operational, legal and contractual requirements to meet international cyber security and data privacy GRC needs
Implemented technologies as SME (Data Protection, Consent, Encryption, Privacy Tracking)
Position: Chief Information Security Officer CISO (Interim) and
Director of Information Security Governance (Interim)
Company: Santander Holdings USA & Santander Securities LLC
Dates: August 2017 to January 2018
Location: City-Holmdel, State-NJ
Key Accomplishments: Created information security governance program for new holding company and 6 entities
DUAL INTERIM ROLES
Designed an information security governance, risk, and compliance program embedded into the 1st Line of Defense for six entities across the USA.
Presented information security governance findings to the Board of Directors at the holding company.
Operationalized data protection efforts within the 1st Line of Defense.
Embedded NYDFS (New York Department of Financial Services) regulations, Privacy by Design principles, and data protection regulations such as GDPR (General Data Protection Regulation), GLBA (Gramm-Leach-Bliley Act), DPbD (Data Protection by Design), state data protection laws, breach notification requirements, data destruction regulations, financial health industry security, and privacy regulations into the 1st Line of Defense.
Served as the Interim CISO for Santander Securities LLC.
Position: Senior Information Security Privacy SME to CISO, DPO, GC(Contract)
Company: Avanade Inc.
Dates: May 2016 to August 2017
Location: City-Remote, State-NJ
Key Achievements:
Implemented and matured incident response platform to integrate privacy and information security.
Implemented and matured a GRC platform
Implemented and matured a Written Information Security Program
Designed a privacy program based on GDPR capable of meeting international data privacy regulatory changes across 23 countries.
Implemented from green fields a GDPR and International Data Protection privacy program advising across 23 countries
Matured SDLC and security assurance efforts (emphasis on pen testing standards)
Led CISO audits across ISO 270**-*****, NIST 800-53 and various NIST control docs, Sans CSC, HIPAA security and privacy controls
Served in both a privacy counsel and senior information security officer capacity for the CISO and GC depts across 23 countries
Advised on technology, privacy and information security aspects for contract matters including Master Services Agreements, Vendor Agreements, Professional Services Agreements, Work Orders / SOW's, Software Licensing Agreements, Non-Disclosure Agreements
Reviewed and reduced cyber risk internationally across WISP (written Information Security Program) including but not limited to SOC, breach management, pen testing procedure review, Disaster Recovery, NIST/ISO framework audit and cyber risk review of broad CISO activities
Designed 23 country GDPR program
Advised on Penetration testing standards
Assessed privacy and information security controls, including BCR (Binding Corporate Rules), SCC (Standard Contractual Clauses), security monitoring tools, security tools legal requirements, privacy regulations, and cyber regulatory regulations, and rationalized them against works council requirements, international and domestic laws, and operational requirements.
Implemented international privacy and cyber regulatory requirements for international incident and breach response
Recommended based on operational, legal and contractual requirements the technology to meet international cyber security data privacy
Guided the CISO and GC suite to integrate GDPR privacy and cyber security regulatory operational and frameworks into operations.
Provided expert advice across all major departments regarding cyber regulatory risk
Position: Senior SME - Information Security Privacy SME (Contract)
Company: DTCC
Dates: July 2015 to December 2015
Location: City-Jersey City, State-NJ
Key Accomplishments: Created a new privacy data protection program across orgs' new expansion into 18 countries
Consultant and counsel providing advice on information security, data privacy, and cyber risk across more than 18 foreign jurisdictions, including the European Economic Area (EEA) and the USA.
Generated technical cyber risk and information security metrics, Key Performance Indicator (KPI) reports, risk data, and enterprise-wide cyber risk reduction strategies.
Provided consultation and counsel on cyber IT controls and data privacy controls.
Supported the development of a data privacy strategy, data transformation roadmap, and long-term strategic priorities for cyber risk reduction through information security and data privacy data transfer initiatives.
Consulted on the revamp of a multi-organization, multi-country information protection and data privacy department, including areas such as vendor management, privacy policy, charter, and daily privacy counseling.
Advanced global cyber security governance by conducting security risk assessments, identifying threats, establishing global reporting systems and procedures for risk, creating training and awareness plans, and integrating risk reporting matrices.
Contributed to cyber investigations, forensics, risk trend analysis, vulnerability exercises, and addressing security operations center (SOC) issues that filtered into the General Counsel's office.
Addressed security awareness, encryption concerns, network security, vendor protection, data protection, and privacy matters.
Engaged in significant international cyber security and data privacy work for numerous business units, from framework development to risk assessment, and provided board-level recommendations.
MEMBERSHIPS / ASSOCIATIONS: ISC2.org, IAPP, RUTGERS MBA ALUMNI, STETSON LAW ALUMNI
Douglas S. Knehr CISSP,FIP, CIPM, CIPP, JD, MBA, BS
*************@*****.*** M: 609-***-****
https://www.linkedin.com/in/doug-knehr/ https://www.DougKnehr.Wordpress.com
The problem I solve:
I resolve the cross-functional risk and dysfunction from an enterprise-level inability to align the Chief Information Security Office, GRC, Data Protection, Privacy, Legal, and AI.
I’ve been fortunate to have matured 10 multinational information security governance, data protection privacy and AI governance programs for: DTCC, Santander, Avanade, Acoustic, Mondelez, Clorox, Lucira Health, Yahoo, Infosys, and the recent Albertsons/Kroger’s Merger-Spinoff org (CSWG).
Key components for security built out or planned across all 10 enterprises over the past 10 years included:
Cybersecurity Business Plan
Continuity of Operations Plan
Cybersecurity Risk Assessment Template
Cybersecurity SCRM Strategy & Implementation Plan
Cybersecurity Operating Procedures
Written Information Security Program
Information Assurance Program
Integrated Incident Response Program
Risk Management Program
Secure Baseline Configurations
Secure Engineering
Vulnerability & Patch Management Program
GRC Program (Control automation + connection to accountability methodology + wisp)
Platform Tech
Training
Data Protection tech - DLP, Governance, Tagging, Classification
26 Platform Privacy + Data Protection Program
AI Governance Platforms
I welcome your call.
Doug Knehr CISSP,FIP, CIPM, CIPP, JD, MBA, BS
*************@*****.***
M: 609-***-****
The training below has enabled me to securely operationalize AI, Privacy, and information security ops at 10 multinational organizations.
Training Outside of work
2014-2025
1
CIPM Certified thru IAPP
2014
2
CIPP Certified thru IAPP
2014
3
CISSP Certified Information System Security Professional
7/15/2015
4
Internet of things – Data Privacy Considerations
5
Everything you need to know about HIPAA
10/1/2014
6
Online Practice Management – Online Marketing Bootcamp
6/3/2015
7
Extensive online privacy and related information security training as found at my portfolio site at:
5/1/2015
8
MCBA: Online Marketing Boot Camp
6/3/2015
9
MCBA: Special Education Rights
6/16/2015
10
The Internet of Things: Data Privacy Considerations
6/30/2015
11
A Practical Guide to Meeting Cyber Security Requirements
7/1/2015
12
Security Lessons Learned from Target, Niemen Marcus, Sony and Other Breaches (Ultimate Windows Security.com and LogRhythm 7-28-201*-*** min Seminar)
7/28/2015
13
Cutting Edge Etch for Sole Practitioners
2/6/2016
14
Top Security Trends for 2014-2015
9/21/2015
15
Lessons Learned from 2015 Verizon Data Breach
9/24/2015
16
US-EU Safe Harbor What Now
10/9/2015
17
Cyber Security Future Threats To Financial Industry
10/15/2015
18
Top 5 Things The CISO needs to know about data privacy
10/15/2015
19
Cyber Threats - Focusing on Home User Security
10/21/2015
20
Managing Innovation Risk
10/28/2015
21
Aligning your hr practices w evolving privacy rules in Latin America
10/29/2015
22
Vendor Risk Data Breach and its business
11/4/2015
23
Penetration testing - Keeping It Real
12/1/2015
24
Phish Me
12/2/2015
25
Beyond Buzzwords - defense in depth
12/2/2015
26
Nymity: Demonstrating compliance
12/16/2015
27
Safe Harbor Data Transfer
12/19/2015
28
Kapersky GoToWebinar - Cybersecurity Forecast: What’s on the Horizon?
1/28/2016
29
NJAJ New Brunswick Cutting Edge Technology for sole practitioners
2/6/2016
30
Cyber Security For Financial Services Industry
3/2/2016
31
Dude Where's My data - Inside the internal security Data exfiltration study
3/17/2016
32
ACC: Negotiating the Cloud: An Overview of Key Issues in the Cloud
3/24/2016
33
The only constant is change - GDPR and Data Privacy
4/14/2016
34
Flipping the Economics of Cyber Attacks
4/19/2016
35
Global Mobility Issues and