Board Oversight of Data Privacy and Security

The deceptively simple obligation to keep private data from becoming public is a growing concern for businesses and their customers. This session focuses on best practices that every board should incorporate, including: 1) establishing clear responsibility for data security, 2) creating an audit committee with adequate substantive knowledge, 3) developing internal and external audit procedures for data security, 4) requiring the head of data security to report issues and progress to the audit committee, and 5) developing crisis management procedures before any problems arise.