Regulatory compliance in information security used to be simple . . . too simple in the opinion of many security professionals. In fact, "check the box security" was a tongue-in-cheek phrase often used to refer to things the legal department made us do that added no real value to the security of the organization. Fast forward to 2019 and we are dealing with competing (and sometimes conflicting) requirements from international governments, U.S. agencies, fifty different state legislatures, attorneys general, "voluntary" compliance frameworks, insurance requirements, and more. It's a minefield out there; how can we survive and still keep our security programs effective?

Back to Louisville InfoSec 2019 video list