Over the years, Adobe has dealt with security incidents that have had privacy implications. In these cases, Adobe’s security professionals bring in privacy experts to provide guidance on proper handling of sensitive information. They are the company’s eyes and ears for an ever-changing regulatory landscape. However, Adobe’s privacy team (like that of many companies) does not have the same technical resources as the security team, so security must often provide technical assistance with privacy issues. As a result, customers have come to view security and privacy as complementary parts of strong data and asset protection.
Drawing on their experience at Adobe, Tom Cignarella and Jennifer Ruehr explain how you can leverage the strengths of both security experts and privacy experts to constantly deliver what customers will expect from you, even through organizational shifts, divisions, and challenges.
Tom Cignarella is the director of the Security Coordination Center at Adobe, where he is responsible for security monitoring, incident response, and threat intelligence for all Adobe products and services, as well as the Adobe enterprise, and sets the strategy and builds out the framework for day-to-day operations for how teams monitor environments, investigate incidents, and communicate with internal stakeholders and customers. Previously, Tom was the director of product operations for Adobe’s CloudOps Group and technical operations for Adobe eSign (now part of Adobe Document Cloud). Prior to joining Adobe, Tom held technical operations leadership positions at Limelight Networks, Clickability, Symantec, BEA, Autodesk, Ariba, and Excite.
Jennifer Ruehr is legal counsel for privacy and security at Adobe, where she works on global privacy issues related to vendor management (including cross-border data transfers and data processing agreements), employee information, customer escalations, and corporate marketing and manages projects related to data governance, HIPAA, and privacy and security incident response. Jennifer is currently a fellow with the Leadership Council on Legal Diversity. She holds a JD from the University of Akron School of Law, a certificate in intellectual property law and technology, and a BA in English from Washington State University. She is a member of the bar in Ohio.
©2017, O'Reilly Media, Inc. • (800) 889-8969 or (707) 827-7019 • Monday-Friday 7:30am-5pm PT • All trademarks and registered trademarks appearing on oreilly.com are the property of their respective owners. • firstname.lastname@example.org