Extending Information Security Methodologies for Personal User in Protecting PII

Learn how to apply information security methodologies to protect personal identifiable information (PII) in this 25-minute conference talk. Explore the process of identifying critical information assets, classifying sensitive data, and assigning impact values. Discover techniques for conducting a family personal assessment, evaluating third-party risks, and addressing privacy gaps. Gain insights into testing policies, documenting vulnerabilities, and identifying opportunities for improvement in safeguarding personal data.

Syllabus

Intro
Why are we here
This is not a checklist
The methodology
Application of methodologies
Who am I
What are you protecting
Identify critical information assets
Identify sensitive information
Identify where sensitive information exists
Separate data by classification
Assign impact value
Assign highwater mark
Family Personal Assessment
Third Parties
Gap in Privacy
The Basic Process
Testing Policies
Evaluating Information
Document Vulnerability
Number
Results
Opportunities for Improvement