The California Consumer Privacy Act (CCPA), signed on June 28, 2018 and applying from January 1, 2020, governs how companies protect Californians' personal data. It doesn't require certification, but an ISO/IEC 27001 information security management system (ISMS) is a strong way to show accountability.
This 60-minute CCPA compliance webinar explains the CCPA definition of personal data, its requirements, territorial reach and legal risks, and how it affects U.S. businesses. You'll look at the main data breach risks and the key actions after a breach, covering validation, monitoring and incident handling.
The session also covers the technical and organizational measures needed through policies, procedures and technology, how an ISMS protects confidentiality, integrity and availability, and practical advice for aligning your system with the CCPA.
WHY SHOULD YOU ATTEND?
Many businesses know they need procedures to detect, report and investigate breaches under the CCPA, but fewer see how ISO/IEC 27001 gives a systematic, risk-based starting point. It doesn't make you compliant by itself, but it helps build the structures compliance needs, and willful violations carry serious consequences.
This session suits CISOs, CIOs, security and privacy professionals, data governance staff, attorneys, auditors, risk managers, data protection officers and IT consultants.
AREA COVERED
- Overview of the CCPA: requirements, territorial reach and legal risks
- The CCPA definition of personal data
- How the CCPA affects U.S.-based businesses
- How an ISO/IEC 27001-aligned ISMS supports CCPA compliance
- Main data breach risks and actions for validation, monitoring and incident handling
- Technical and organizational requirements through policies, procedures and technology
- How an ISMS manages confidentiality, integrity and availability
- Data management challenges
- Practical advice for aligning your management system with the CCPA
LEARNING OBJECTIVES
- Explain the CCPA definition of personal data and its core requirements
- Describe how the CCPA affects U.S.-based businesses
- Identify data management challenges and the steps needed to comply
- Use an ISO/IEC 27001 ISMS to support CCPA compliance
- Plan the key actions to take after a data breach
- Choose approaches and solutions for CCPA requirements
WHO WILL BENEFIT?
• Chief Information System Officers
• Information Security Directors
• Data governance and management professionals
• Staff Attorneys
• Privacy and Compliance Professionals
• Human Resource Professionals
• Risk management professionals and Auditors tasked with compliance and risk transfer
• Data Protection Officers
• Chief Information Officers/Chief Technology Officers
• Internal Audit Managers and Staff
• Information Technology Security Officers
• Information Technology and Data Consultants as well as project managers involved in data protection, information security or cyber security issues
Many businesses know they need procedures to detect, report and investigate breaches under the CCPA, but fewer see how ISO/IEC 27001 gives a systematic, risk-based starting point. It doesn't make you compliant by itself, but it helps build the structures compliance needs, and willful violations carry serious consequences.
This session suits CISOs, CIOs, security and privacy professionals, data governance staff, attorneys, auditors, risk managers, data protection officers and IT consultants.
- Overview of the CCPA: requirements, territorial reach and legal risks
- The CCPA definition of personal data
- How the CCPA affects U.S.-based businesses
- How an ISO/IEC 27001-aligned ISMS supports CCPA compliance
- Main data breach risks and actions for validation, monitoring and incident handling
- Technical and organizational requirements through policies, procedures and technology
- How an ISMS manages confidentiality, integrity and availability
- Data management challenges
- Practical advice for aligning your management system with the CCPA
- Explain the CCPA definition of personal data and its core requirements
- Describe how the CCPA affects U.S.-based businesses
- Identify data management challenges and the steps needed to comply
- Use an ISO/IEC 27001 ISMS to support CCPA compliance
- Plan the key actions to take after a data breach
- Choose approaches and solutions for CCPA requirements
• Chief Information System Officers
• Information Security Directors
• Data governance and management professionals
• Staff Attorneys
• Privacy and Compliance Professionals
• Human Resource Professionals
• Risk management professionals and Auditors tasked with compliance and risk transfer
• Data Protection Officers
• Chief Information Officers/Chief Technology Officers
• Internal Audit Managers and Staff
• Information Technology Security Officers
• Information Technology and Data Consultants as well as project managers involved in data protection, information security or cyber security issues