Privacy and Security Management in an Agile Environment presented at IAPP 2014

by Maritza Johnson, Bhavesh Advani, Kenesa Ahmad, Babak Siavoshy,

Summary : Today, many successful firms run their IT development using an agile model. However, risk managers, compliance professionals and regulators are often more familiar with waterfall-style projects involving gateways and sign-offs throughout the development lifecycle. Traditional risk management struggles to maintain relevancy in this model, and is increasingly bypassed by the business, acknowledged only late in the lifecycle process. Ultimately, risk management functions must adapt. Here, we’ll explore the challenges of privacy and security risk management in an agile environment. We'll discuss various approaches used across industries and ask you to share examples in an open discussion format.
What you’ll take away:
· An overview of the main challenges in managing privacy and security risks in an agile environment
· Key opportunities and areas with “easy wins” for addressing immediate, agile risk management issues within an organization or business