California Consumer Privacy Act (CCPA) Readiness: Preparing for January 2020 and Beyond

The California Consumer Privacy Act (CCPA), signed on June 28, 2018 and applying from January 1, 2020, governs how companies protect Californians' personal data. It doesn't require certification, but an ISO/IEC 27001 information security management system (ISMS) is a strong way to show accountability.

This 60-minute CCPA compliance webinar explains the CCPA definition of personal data, its requirements, territorial reach and legal risks, and how it affects U.S. businesses. You'll look at the main data breach risks and the key actions after a breach, covering validation, monitoring and incident handling.

The session also covers the technical and organizational measures needed through policies, procedures and technology, how an ISMS protects confidentiality, integrity and availability, and practical advice for aligning your system with the CCPA.

• Explain the CCPA definition of personal data and its core requirements
• Describe how the CCPA affects U.S.-based businesses
• Identify data management challenges and the steps needed to comply
• Use an ISO/IEC 27001 ISMS to support CCPA compliance
• Plan the key actions to take after a data breach
• Choose approaches and solutions for CCPA requirements

• Overview of the CCPA: requirements, territorial reach and legal risks
• The CCPA definition of personal data
• How the CCPA affects U.S.-based businesses
• How an ISO/IEC 27001-aligned ISMS supports CCPA compliance
• Main data breach risks and actions for validation, monitoring and incident handling
• Technical and organizational requirements through policies, procedures and technology
• How an ISMS manages confidentiality, integrity and availability
• Data management challenges
• Practical advice for aligning your management system with the CCPA

Many businesses know they need procedures to detect, report and investigate breaches under the CCPA, but fewer see how ISO/IEC 27001 gives a systematic, risk-based starting point. It doesn't make you compliant by itself, but it helps build the structures compliance needs, and willful violations carry serious consequences.

This session suits CISOs, CIOs, security and privacy professionals, data governance staff, attorneys, auditors, risk managers, data protection officers and IT consultants.

•  Chief Information System Officers
•  Information Security Directors
•  Data governance and management professionals
•  Staff Attorneys
•  Privacy and Compliance Professionals
•  Human Resource Professionals
•  Risk management professionals and Auditors tasked with compliance and risk transfer
•  Data Protection Officers
•  Chief Information Officers/Chief Technology Officers
•  Internal Audit Managers and Staff
•  Information Technology Security Officers
•  Information Technology and Data Consultants as well as project managers involved in data protection, information security or cyber security issues

Dr. Robert E. Davis obtained a Bachelor of Business Administration in Accounting and Business Law, a Master of Business Administration in Management Information Systems, and a Doctor of Business Administration in Information Systems Management from Temple, West Chester, and Walden University; respectively. Moreover, during his twenty years of involvement in education, Dr. Davis acquired Postgraduate and Professional Technical licenses in Computer Science and Computer Systems Technology. Dr. Davis also obtained the Certified Information Systems Auditor (CISA) certificate — after passing the 1988 Information Systems Audit and Control Association’s rigorous three hundred and fifty multiple-choice questions examination; and was conferred the Certified Internal Controls Auditor (CICA) certificate by the Institute for Internal Controls.

Since starting his career as an information systems (IS) auditor, Robert has provided data security consulting and IS auditing services to corporations as well as other organizations; in staff through management positions. Before engaging in the practice of IS auditing and information security consulting; Robert (as a corporate employee) provided inventory as well as general accounting services to Philip Morris, USA, and general accounting services to Philadelphia National Bank (Wells Fargo). Furthermore, he has prior experience as a freelance writer of IT audit and information security training material.

Dr. Davis received recognition as an accomplished, energetic auditor, author, and speaker with a sound mix of experience and skills in monitoring and evaluating controls. Based on his accomplishments, Temple University's Fox School of Business and Management Alumni Newsletter, as well as The Institute for Internal Controls e-newsletter featured Dr. Davis. Furthermore, he is an Advisory Board Member of The Institute for Internal Controls, the first and inaugural Temple University CISA in Residence and a founding Temple University Master of Science in IT Auditing and Cyber-Security Advisory Councilmen. Last, he accepted invitations to join Delta Mu Delta International Honor Society, the Golden Key International Honour Society, the Thomson Reuters' Expert Witness List, the IT Governance LTD expert panel, as well as the International Association of IT Governance Standards honorary membership group.