ACFE Sydney – July 2018 Event: Cyber Security/Privacy

Tuesday, 24 July 2018 (RSVP by Friday 20 July 2018)
LIMITED SPOTS AVAILABLE

The Notifiable Data Breach Scheme is here…are you and your business ready?

Since February 2018, for the first time in Australia, entities subject to the Privacy Act 1988 (Cth) (the Privacy Act) have a mandatory obligation under the Notifiable Data Breaches scheme (NDB scheme) to report what are called ‘eligible data breaches’ to both the Office of the Australian Information Commissioner (OAIC), and any individuals who may be potentially affected by a data breach. 

A critical part of being able to comply with the NDB scheme is preparation. Entities need to know what information they have, where it is stored, how it is protected, how they’ll know when a data breach has occurred, and then how they’ll respond should a breach occur.

In this workshop we will run through different scenarios that may constitute an eligible data breach and what the cyber security team needs to do. We will also discuss third parties and fourth parties and the risks these vendors may pose to an organisation from a cyber-security and privacy perspective and how to implement vetting practices and cyber attestations.

Presenters

Kelly Henney – National Data Privacy Lead – KPMG

Paul Black – Partner – KPMG

Kelly Henney

Kelly is the Australian Data Privacy Leader for KPMG. Kelly has over 17 years’ experience across the corporate sector and with ASIC in Government regulation. Kelly has been responsible for and project managed multiple high profile litigations and Regulatory Taskforces. Kelly brings a wealth of experience managing complex regulatory   investigations, process governance, conduct and culture. Part of Kelly’s responsibility in these highly sensitive environments is to manage information governance involving confidentiality, integrity, security and privacy

Paul Black

Paul is a Partner in the KPMG Forensic Practice, specialising in Technology and Cyber Incident Response.  Paul has over 20 years of experience in the investigation of technology related offences, starting his career in the UK Police service where he established and led one of the first Computer Crime Units.  Since this time, Paul has specialised in the area of Incident Response and Technology Forensics having led responses for some of the world’s largest organisations.

He has provided testimony in a number of domestic and international jurisdictions and acted as an expert witness in a broad range of technology matters.

Paul is regularly engaged by private and public sector clients and their legal advisors on matters that involve:

• The management and investigation of suspected and confirmed cyber security incidents.
• The preparation of expert reports regarding electronic evidence.
• The management and delivery of large scale document identification, production and review projects associated with regulatory and compliance investigations.

Event Details