In episode 64 of the Cybersecurity Minute, Rob Wood shares advice on how the relationship between the CISO, the CDO, and other members of the data team can boost data strategy.
Highlights
00:25 — Today’s focus is on the relationship between the chief information security officer (CISO), the chief data officer (CDO), and data.
00:41 — Having more data is sometimes useful for a data team, and there can also be a perception of more is better. Today, however, from a security standpoint, there’s a collective understanding that more data is riskier.
01:05 — When engaging with data teams, start to find a common ground of what data is actually meaningful for the kinds of products, solutions, and services that the organization is trying to offer.
01:32 — Then go below the surface. Say you “need” a social security number. “Why?” asks Rob. You might find out through frameworks like the 5 Whys that what is really needed is some kind of unique identifier, which could be something that, unlike a social security number, is not sensitive PII (Personally Identifiable Information).
02:12 — Engage teams in this more intentional way, and you’ll find opportunities to enable them while simultaneously reducing your organization’s risk.
