A Q&A with Michelle Visser of Ropes & Gray LLP The recent ruling that Massachusetts’ Attorney General can move forward with its suit against Equifax portends a new era in data breach litigation and regulation. To find out more about this case and what it means for corporate risk, I spoke with Michelle Visser, a…

A Q&A with Brian Schaeffer of OceanFirst Bank N.A. It’s a given that cyber attackers will target financial institutions but community banks and credit unions may be more vulnerable, with fewer resources to devote to security and the assumption, among perpetrators, that they’re an easier mark. I spoke to Brian Schaeffer, Chief Information Security Officer…

A Q&A with Jim Leonard of InfoArmor One of the newer and potentially more promising weapons being deployed in the battle for cyber security is machine learning, in which systems can improve themselves based on experience and previous data. We asked Jim Leonard, Director with the Advanced Threat Intelligence unit at InfoArmor for some insight…

A Q&A with Thom Rickert of Trident Public Risk Solutions Thom Rickert, vice president, emerging risks specialist for Trident Public Risk Solutions – Argo Group US, has specialized in public entity insurance for 35 years. In light of recent public entity cyber breaches like the ransomware attack we saw in Atlanta in March 2018, Rickert…

A Q&A with Chris Pillay of Meridian Technologies An often-overlooked risk in cyber security is software development and testing, which is often done in house in large companies. To test software, engineers utilize either scrubbed data and where the process of scrubbing personally identifiable information is too complex, costly or time-consuming, live data is used,…

A Q&A with Stewart Atkinson of Dashlane Too often, data breach incidents can be traced to poorly managed passwords, underscoring the fact that humans are almost always the weak link. Yet with so many functions both in and outside the office requiring the use of usernames and passwords, maintaining proper password hygiene can be a…

A Q&A with Andy Sambandam of Clarip, Inc. Wrongful collection of private data often occurs unwittingly on the part of both consumers and the companies tracking them. I talked to Andy Sambandam, founder and CEO of Clarip, Inc., a software as a service data privacy platform, about how individuals and organizations can be more savvy…

A Q&A with Al Saikali of Shook, Hardy & Bacon, LLP Up until recently class action suits involving the Biometric Information Privacy Act were rare. In the past two years, however, this Illinois statute has become the focus of a trend, with plaintiffs attorneys zeroing in on companies that employ Illinois residents. I spoke with…

A Q&A with Scott Diamond of Chicago Crypto Network, LLC Blockchain is an emerging technology with the potential to greatly reduce cyber risk and ensure data integrity. To find out more about how it works and why organizations can benefit from rethinking their business processes, I talked to Scott Diamond of Chicago Crypto Network.

A Q&A with David Lineman, Information Shield Public entities are equally at risk for data loss incidents as organizations in the private sector, yet PEs are often far less prepared to handle these events. I spoke to David Lineman, president of Information Shield, about how PEs can strengthen their cyber security posture.