Blog - 2017

GDPR Surprise – Most Enterprises Aren’t Ready

October 26, 2017

The EU’s General Data Protection Regulation (GDPR) goes into effect on May 25, 2018, but according to Top Corporate Data Protection Challenges, a CGOC survey of 132 compliance officers from organizations around the world and across multiple industries, only 6 percent of respondents feel their organizations are currently compliant with the impending regulation, with most...

How to Reduce Risk and Prepare for a Data Breach

September 19, 2017

In light of the recently revealed Equifax data breach, it might be a good time to highlight a best practice that can help manage your corporate risk. Gone are the days where the data security personnel would hide out in the dark basement of the enterprise they were monitoring. Today’s successful security professionals need to...

Internal Investigations: 10 Ways To Be A Cyber Sleuth

August 28, 2017

By Caroline Sweeney (The following article was first published on August 15, 2017,  on  Law360, written by Caroline Sweeney, the global director for e-discovery and client technology at Dorsey & Whitney LLP and a faculty member for the Compliance, Governance and Oversight Council (CGOC).) Law360, New York (August 15, 2017, 1:00 PM EDT) — Cyberattacks aren’t the only significant threats facing enterprises...

Five Essential Steps to GDPR Survival

August 10, 2017

by Eckhard Herych The passage is excerpted from an August 3, 2017, article on Info Security Magazine, written by Eckhard Herych, Faculty Member of the Compliance, Governance & Oversight Council (CGOC). We are now less than a year away from the implementation of the European Commission’s General Data Protection Regulation (GDPR) on May 25, 2018, and the...

10 Critical Steps to Create a Culture of Cybersecurity

August 1, 2017

by Edward J. McAndrew The passage is excerpted from a July 26, 2017, article on the website Dark Reading, written by Edward J. McAndrew, Partner & Co-Chair, Privacy & Data Security Group, Ballard Spahr LLP, Faculty Member of the Compliance, Governance & Oversight Council (CGOC). Businesses are more vulnerable than they need to be. Here’s what...

Cybersecurity, eDiscovery and More: Recap of CGOC Minneapolis 2017

June 16, 2017

It was wonderful to be back in Minneapolis for another CGOC Regional Meeting at the Dorsey firm. Since our last event there in 2015, there have been many important developments in Information Governance. Addressing the Current Cyber Threat Landscape Anthony Ferrante fresh off his tenure at a number of high profile agencies (White House, National...

Privacy, Unified Governance and More: Recap of CGOC NYC 2017

March 21, 2017

One of the benefits of yearly meetings in the same city is the ability to take a barometer reading of returning attendees on what has changed for them since last year. Attendees sharing updates into the progress of their 2016 initiatives around data privacy, analytics, eDiscovery and defensible data deletion helps us gauge what topics...

Latest CGOC Information Governance Process Maturity Model

January 31, 2017

Much has happened in the world of information governance since 2012. I use 2012 as my yardstick because that’s when the original CGOC Information Governance Process Maturity Model was created. The writers and working group members who put it together were experts and visionaries, and as such, over the last five years, the model has...