Security meets data protection: risk assessment, standards and certification
summary
Panel claims security and data protection are converging and GDPR makes security a data protection principle so controllers must show accountability via DPIAs, breach procedures and risk-based measures. Practical gaps include low developer privacy knowledge and few off‑the‑shelf PETs; recommended tools are ISO/NIST standards and ENISA’s Ebios Risk Manager. Certification is promising: cloud schemes required only ~20 sentence tweaks to cover GDPR, while some product evaluations fail ~50% on first try.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 5:50Data security
- 21:00Privacy
- 21:50Security and Privacy convergence
- 29:45Security and standards
- 30:43Certification landscape
- 38:49Cybersecurity and data protection
- 47:55Conclusion
- 48:55Question
related talks
01h 14mCitizen security vs. data security ...
01h 15mDATA PROTECTION ENGINEERING: WHAT IS THE ROAD AHEAD?
01h 01mAcademic sessions on data protection law and privacy
32mPanel: How can Data Protection become a driver for the Data Economy
30mPrivacy by Design?
01h 12mCYBERSECURITY FOR EUROPE: FOSTERING RIGHTS THROUGH TECHNOLOGY
29mDPIA in practice typical hurdles and remedies
01h 59mDeep Dive Workshop – Data Security and Data Protection