Implementing the NIST Privacy Framework

Course details

These days, a large-scale security breach seems to be an almost-daily occurrence. Standing in the balance is the personal information of millions of people, alongside the private records of your entire organization. Losses incurred by a security breach can spell disaster, but you can always do more to mitigate the risk. In this course, security expert Ronald Woerner shows you how to implement the NIST Privacy Framework to better protect critical customer information.

Explore the fundamentals of the NIST Privacy Framework and how your organization can use it to categorize and effectively oversee its in-house privacy protocols. Discover the benefits of implementing the NIST Framework as a safeguard in your security management lifecycle. Learn strategies of identifying, managing, and mitigating privacy risks, as Ronald teaches you how to assess your own specific needs and outcomes, highlighting real-world examples and best practices along the way.

Concepts

0. Introduction

01 - Privacy framework welcome
02 - What you should know

1. NIST Privacy Framework Preparation

03 - Privacy framework introduction
04 - What is privacy
05 - Why care about privacy
06 - NIST Privacy Framework structure
07 - Establishing and improving a privacy program
08 - Privacy vs. security vs. compliance vs. risk
09 - Leveraging the NIST Privacy Framework for a privacy risk program

2. Identify Function

10 - Identify-P function
11 - Data inventory and mapping
12 - Business environment
13 - Data processing risk identification

3. Govern Function

14 - Privacy governance policies and procedures
15 - Privacy risk management strategy
16 - Monitoring, review, awareness, and training

4. Control and Communicate Functions

17 - Data processing policies, processes, and procedures
18 - Data processing management
19 - Disassociated processing
20 - Communicate data processing policies and practices
21 - Challenge - NIST PRAM worksheets

5. Protect Function

22 - Data protection and maintenance practices and procedures
23 - Identity management, authentication, and access control
24 - Data security
25 - Protective technology

6. Detect, Respond, and Recover Functions

26 - Detecting privacy issues
27 - Response and recovery

7. Privacy Planning

28 - Privacy Impact Assessments (PIAs)
29 - Privacy management plans

Conclusion

30 - Privacy next steps and resources