Legal Issues in Privacy & Cyber Security
Compliance and Best Practices
November 19 - 20, 2019 · Toronto, Ontario
Day Two Program Agenda: Wednesday, November 20, 2019
8:00 - 9:00 Registration and Continental Breakfast
9:00 - 9:15
Welcome and Chair’s Opening Remarks
Mark Hayes, Hayes eLaw LLP
David Goodis, Assistant Commissioner, Information and Privacy Commissioner of Ontario
9:15 - 10:15
Health Care Challenges: What the Sector is Learning and How It Can Assist Other Sectors
Laura Davison, Vice President, Chief Privacy Officer, General Counsel & Corporate Secretary, eHealth Ontario
Gillian Kafka, Hamilton Health Sciences, Legal Counsel and Chief Privacy Officer
Erica Zarcovich, General Counsel and Chief Privacy Officer, Cancer Care Ontario
Sandeep Deol, Legal Counsel - Information Management (Privacy) and Technology, Corporate/Commercial at University Health Network
- Key lessons learned the hard way
- What cyber risks are we seeing?
- What we have learned about attacks and prevention
- The need for long term strategic plans and collective action
- How is critical infrastructure being safeguarded?
- Need to raise awareness, define roles and responsibilities, develop policies and standards, establish cyber security plans and budgets
10:15 - 10:30 Networking Break
10:30 - 11:30
Canadian Banks and Financial Institutions: At the Forefront of Privacy and Cyber Security
Moderator: Charles Docherty, Assistant General Counsel, Canadian Bankers Association
Holly Shonaman, Chief Privacy Officer, RBC
Claude Baksh, Chief Compliance Officer, Chief Risk Officer, Chief Privacy Officer and Chief AML Officer, Computershare Canada
Adam Evans, Vice President & CISO Cyber Operations, RBC
- Actions for prevention, detection and response
- Key challenges
- How the banking sector is working toward solutions
- Breaking and entering to date - patterns and trends
- Sector specific learning
- Money transfers via email - convenience over security?
- Other typical problems and solutions
11:30 - 12:15
Public Sector issues in Privacy and Cyber Security
Eric Lawton, Manager, Risk Management, Cyber Security & Compliance, City of Toronto
Altaf Kassam, Director, Information Management, Children’s Aid Society of Toronto
- Key challenges
- Innovative solutions
- Breaking and entering to date - patterns and trends
- Sector specific learning
12:30 - 1:30 Luncheon Break
1:30 - 2:30
Cyber Audits: A Check-List Approach to Determining Where Your Organization Is Most Vulnerable and Where You Stand on the Preparedness Spectrum
Sylvia Kingsmill, Partner, National Lead, Privacy, Regulatory & Information Management, KPMG
Adil Palsetia, Partner, Cybersecurity, KPMG
- Establishing your threat base line
- Evaluating your readiness posture
- Review of all systems, firewalls, anti-virus etc.
- The need for regular cyber audit check-ups
- What should be on the cyber audit check-list?
- What haven’t you done?
- Where do you stand on the readiness spectrum in each area?
- Updating your cyber security policy to mitigate risk if and when disaster strikes
- Training and testing – what training sticks and what needs work
- Desktop exercises
- Intersection of privacy and security in breach reporting as a preparedness exercise
2:30 - 2:45 Networking Break
2:45 - 3:30
How Shifts in the International Data Protection World Affect Data Protection Issues in Canada
3:30 - 4:15
Cyber Security And Privacy Liability Insurance For Public And Private Organizations
- State of the cyber risk market
- Underwriting cyber risk
- Convergence of coverage
- What are your insurance coverage options?
- Reading the fine print - What’s covered, what’s not?
- Quantitative foundations for managing cyber risk
- Cyber aggregate risk, silent cyber exposure, risk selection, reinsurance, catastrophic events
- Prioritizing execution plans, enabling risk management and quantification as variables for decision making
- Balancing compliance programs with day-to-day activity
- Role and insurance for privacy officers, Chief Information and Security Officers
- Trends in cyber insurance claims
- Breach preparedness – key factors insurers consider when underwriting cyber insurance
- The need for a comprehensive, well communicated incident-response plan
4:15 End of Day Two
|
