California Consumer Privacy Act (CCPA) Readiness: Preparing for January 2020 and Beyond

Recorded Session
60 Minutes

The California Consumer Privacy Act (CCPA), signed on June 28, 2018 and applying from January 1, 2020, governs how companies protect Californians' personal data. It doesn't require certification, but an ISO/IEC 27001 information security management system (ISMS) is a strong way to show accountability.

This 60-minute CCPA compliance webinar explains the CCPA definition of personal data, its requirements, territorial reach and legal risks, and how it affects U.S. businesses. You'll look at the main data breach risks and the key actions after a breach, covering validation, monitoring and incident handling.

The session also covers the technical and organizational measures needed through policies, procedures and technology, how an ISMS protects confidentiality, integrity and availability, and practical advice for aligning your system with the CCPA.

WHY SHOULD YOU ATTEND?

Many businesses know they need procedures to detect, report and investigate breaches under the CCPA, but fewer see how ISO/IEC 27001 gives a systematic, risk-based starting point. It doesn't make you compliant by itself, but it helps build the structures compliance needs, and willful violations carry serious consequences.

This session suits CISOs, CIOs, security and privacy professionals, data governance staff, attorneys, auditors, risk managers, data protection officers and IT consultants.

AREA COVERED

  • Overview of the CCPA: requirements, territorial reach and legal risks
  • The CCPA definition of personal data
  • How the CCPA affects U.S.-based businesses
  • How an ISO/IEC 27001-aligned ISMS supports CCPA compliance
  • Main data breach risks and actions for validation, monitoring and incident handling
  • Technical and organizational requirements through policies, procedures and technology
  • How an ISMS manages confidentiality, integrity and availability
  • Data management challenges
  • Practical advice for aligning your management system with the CCPA

LEARNING OBJECTIVES

  • Explain the CCPA definition of personal data and its core requirements
  • Describe how the CCPA affects U.S.-based businesses
  • Identify data management challenges and the steps needed to comply
  • Use an ISO/IEC 27001 ISMS to support CCPA compliance
  • Plan the key actions to take after a data breach
  • Choose approaches and solutions for CCPA requirements

WHO WILL BENEFIT?

•  Chief Information System Officers
•  Information Security Directors
•  Data governance and management professionals
•  Staff Attorneys
•  Privacy and Compliance Professionals
•  Human Resource Professionals
•  Risk management professionals and Auditors tasked with compliance and risk transfer
•  Data Protection Officers
•  Chief Information Officers/Chief Technology Officers
•  Internal Audit Managers and Staff
•  Information Technology Security Officers
•  Information Technology and Data Consultants as well as project managers involved in data protection, information security or cyber security issues

Many businesses know they need procedures to detect, report and investigate breaches under the CCPA, but fewer see how ISO/IEC 27001 gives a systematic, risk-based starting point. It doesn't make you compliant by itself, but it helps build the structures compliance needs, and willful violations carry serious consequences.

This session suits CISOs, CIOs, security and privacy professionals, data governance staff, attorneys, auditors, risk managers, data protection officers and IT consultants.

  • Overview of the CCPA: requirements, territorial reach and legal risks
  • The CCPA definition of personal data
  • How the CCPA affects U.S.-based businesses
  • How an ISO/IEC 27001-aligned ISMS supports CCPA compliance
  • Main data breach risks and actions for validation, monitoring and incident handling
  • Technical and organizational requirements through policies, procedures and technology
  • How an ISMS manages confidentiality, integrity and availability
  • Data management challenges
  • Practical advice for aligning your management system with the CCPA
  • Explain the CCPA definition of personal data and its core requirements
  • Describe how the CCPA affects U.S.-based businesses
  • Identify data management challenges and the steps needed to comply
  • Use an ISO/IEC 27001 ISMS to support CCPA compliance
  • Plan the key actions to take after a data breach
  • Choose approaches and solutions for CCPA requirements

•  Chief Information System Officers
•  Information Security Directors
•  Data governance and management professionals
•  Staff Attorneys
•  Privacy and Compliance Professionals
•  Human Resource Professionals
•  Risk management professionals and Auditors tasked with compliance and risk transfer
•  Data Protection Officers
•  Chief Information Officers/Chief Technology Officers
•  Internal Audit Managers and Staff
•  Information Technology Security Officers
•  Information Technology and Data Consultants as well as project managers involved in data protection, information security or cyber security issues

Currency:
Webinar Option
Transcript (PDF Transcript of the Training)
Downloadable Recorded Session
USB

Speaker Profile

ins_img Dr. Robert E. Davis

Dr. Robert E. Davis obtained a Bachelor of Business Administration in Accounting and Business Law, a Master of Business Administration in Management Information Systems, and a Doctor of Business Administration in Information Systems Management from Temple, West Chester, and Walden University; respectively. Moreover, during his twenty years of involvement in education, Dr. Davis acquired Postgraduate and Professional Technical licenses in Computer Science and Computer Systems Technology. Dr. Davis also obtained the Certified Information Systems Auditor (CISA) certificate — after passing the 1988 Information Systems Audit and Control Association’s rigorous three hundred and fifty multiple-choice questions examination; and was conferred the …

Upcoming Webinars