Most American organizations, and many organizations operating in certain member state jurisdictions in the EU, have been dealing with breach notification for years. It's pretty straightforward. Well, as straightforward as dealing with 50+ different breach notification laws can be. Now, however, with the EU's General Data Protection Regulation, there may be one breach notification law to rule them all. Its requirement for quick turnaround (72 h...

For decades, information security functions have fought for the responsibility to monitor the flow of information through the organization, in paper and digital formats, throughout its entire life cycle, and to determine the existence and accuracy of data classification. This effort has largely been successful. However, if all data flows through security’s filters, it is incumbent upon security professionals to implement the proper cont...