Information Security and Vendor Contracting: Avoiding Common Pitfalls

Companies exchange sensitive information all the time, but are they taking the proper steps to minimize undue information exposure? In particular, every business entrusts sensitive, highly proprietary information to its business partners and vendors (so-called “insiders”), including hosted service/cloud providers. Ensuring information security is properly integrated into the entire contracting process, from initial due diligence through contract execution through post-contract monitoring, is absolutely critical to ensure sensitive information is protected and to comply with the growing number of laws and regulations applicable to data. According to the FBI, the incidence of hacking and insider misappropriation or compromise of confidential information is at an all-time high.

Topics to be discussed include:

• What are the biggest misconceptions about information security?


• What are the risks of not properly protecting your company’s sensitive information?


• Navigating the rules of the federal and state regulatory bodies


• The requirements of disclosing cyber breaches and the implications to your business


• Three steps to take to protect data entrusted to third parties, and common pitfalls


• Specific types of vendor engagements and negotiation tips

Foley Speakers

• Michael R. Overly, Partner


• Aaron K. Tantleff, Senior Counsel

This is a complimentary program; however, pre-registration is required. For additional information, please contact Sivan Galinsky at [email protected].

Foley & Lardner LLP will apply for CLE credit after the program, wherever applicable. Foley & Lardner LLP certifies that this activity has been approved for California MCLE credits by the State Bar of California in the amount of one General credit. Foley & Lardner LLP is a State Bar of California MCLE approved provider. Please note that participants must log in to both the teleconference and Adobe Connect portions on the date of the event; credit may not be obtained by viewing and/or listening to a program recording after the event.