Advising clients with limited resources on cost-effective data security and privacy strategies

Most commentary about developing or enhancing an entity’s data security and privacy program assumes the entity has the monetary and human resource capabilities to develop and execute a detailed program. Many entities, however, such as non-profits or start-ups, do not have such capabilities. Nevertheless, the lack of funds or human resources does not absolve such entities of implementing and maintaining appropriate data security and privacy best practices. The panel will lead a dialogue with all WG11 members in attendance on how entities with limited resources can develop and maintain a defensible data security and privacy program.