especially in small and midsized firms, are finding their swim lanes getting broader, encompassing privacy as an area of responsibility. This book will help navigate, identify gaps and provide practical examples and ideas for building a sustainable and essential privacy framework for any organization.
- Wei Tschang, CISSP, CIPP/US, CISA, CISM, CGEIT, First VP for ISACA New York Metropolitan Chapter Head of Information Security, Cadwalader, Wickersham, & Taft LLP
Ulf Mattson, whose security insights I have cherished for years, has written the book that C-levels need to read. Data's value to an enterprise is well known, but Ulf explores how it's also a danger. It's a danger to the business in the hands of a cyberthief, it's a danger to the business if it disappears (accidentally or maliciously), it's a danger to business operations if it can't be effectively managed, analyzed, stored and retrieved and it's absolutely a danger to an enterprise when it hurts customers, which is what new data privacy laws are all about. Is data friend or foe? Frustratingly, it's both. Read this book to know how to control data and stop it from controlling you.
- Evan Schuman, Computerworld weekly columnist, Moderator for MIT Sloan Management Review events, Member, Internet Press Guild
"Information and its usage is a massive component of the digital economy, something Ulf discusses extensively in this book. For privacy professionals looking to understand the complexities of applications at scale in this age, this book provides excellent (if not terrifying) diagrams of how modern systems work. APIs and distributed systems create value together, but that creates unique problems for those of us tasked with protecting the data driving that value. For cybersecurity professionals who want to understand more of what risk and privacy leaders are looking to solve for, this book provides crucial insight into the minds of privacy professionals as they work to apply legal and regulatory frameworks to daily operations."
- Branden R. Williams, DBA, CISSP, CISM
