How prepared are you for GDPR today?

1. Copyright © 2018 Forcepoint. | 1
Karlene Berger
Solution Director, User & Data Security
Forcepoint
June 6, 2018
GDPR is Here. Now What?

2. Copyright © 2018 Forcepoint. | 2
KICKOFF POLL - QUESTION:
How prepared are you for GDPR today?

3. Copyright © 2018 Forcepoint. | 3
General Wide-Ranging
Data Personal Records (PII)
Protection Data/Privacy
Regulation By-law/Instruction

4. Copyright © 2018 Forcepoint. | 4
KEY FACTORS IN NAVIGATING GDPR
It applies to entities that
process or control EU citizen
data.
Requires inventorying,
management, and control of
personal data
Reporting data breaches within
72 hoursController - Offer goods or services to EU residents
and/or profile EU residents
Processor - Processes personal data belonging to EU
residents on behalf of an organization

5. Copyright © 2018 Forcepoint. | 5
Data Loss Prevention and CASB
POST-BREACHPRE-BREACH
IDENTIFY
Personal data that
you control or
process and where
it resides
PROTECT
Protect personal
data from
compromise and
misuse
DETECT
Provide detection of
insider threats and
data incidents
RESPOND
Reduce response
times to incidents to
comply and protect
the organisation
RECOVER
Get back to ‘normal’
and learn from the
event – use
feedback to ‘prepare’
Inventory for
Personal Data
Map, Manage & Control
Personal Data Flows
Respond to Data Incidents in a Timely Manner
Technologies mapped to the GDPR
User & Entity Behavioral Analytics
GDPR WITHIN THE NIST FRAMEWORK

6. Copyright © 2018 Forcepoint. | 6
CHALLENGES IN INVENTORYING PERSONAL DATA
DATA IS
EVERYWHERE
Cloud
DatabaseEmail
Network
Storage
Laptop
Drives
INDICATORS
OF
THEFT
XXX-XXX-XXX-XXX
Described Learned
VS.XXX-XXX-XXX-XXX
XXX-XXX-XXX-XXX
Structured Un-Structured
VS.
XXX-XXX
XXX-XXX
XXX-XXX
XXX-XXX
XXX-XXX
XXX-XXX
XXX-XXX
XXX-XXX
XXX-XXX
XXX-XXX
XXX-XXX
XXX-XXX
File Tags Scanning
VS.
DATA IS NOT ALWAYS
EASY TO FIND
DATA ISN’T JUST LOST, IT
CAN BE STOLEN TOO

7. Copyright © 2018 Forcepoint. | 7
HOW DO YOU MANAGE AND CONTROL DATA WHEN ITS IN USE & IN MOTION?
Who
Human Resources
Customer Service
Finance
Accounting
Legal
Sales / Marketing
Marketing
Technical Support
Engineering
What
Source Code
Credit Card Data
M&A Plans
Employee Salary
Personal Data
Financial Report
Customer Records
Manufacturing Docs
Research
Where
Evernote
Dropbox
Facebook
OneDrive
Removable Media
Malicious Server
Business Partner
Competitor
Customer
How
File Transfer
Instant Messaging
Peer-to-Peer
Print
Email
Web
Confirm
Notify
Remove
Quarantine
Encrypt
Block
File Copy
Copy/Paste
Print Screen
Action
Confirm
Audit
Notify

8. Copyright © 2018 Forcepoint. | 8
CONSIDERATIONS FOR MONITORING DATA FLOWS
ENDPOINT
Data in Use
& in Motion
NETWORK
Data in Motion
Active
Sync
IM
FTP
Printer
Email
Media
Web &
Cloud
Storage
IM
FTP
Email
Network Printer
Web &
Cloud
Active
Sync
CLOUD
Data In Use
& in Motion
Monitor
Uploads
Monitor File
Changes
Discover
Cloud Use

9. Copyright © 2018 Forcepoint. | 9
MANAGE AND CONTROL
PERSONAL DATA FLOWS
INVENTORY
PERSONAL DATA
DLP: Manage and control
data across Network,
Endpoint, Web, and Email
CASB and DLP: Discover
where personal data lives
within your organization
DLP AND CASB CAN DRIVE GDPR WITHIN YOUR ORGANIZATION
CASB: Manage and control
data within critical cloud
applications

10. Copyright © 2018 Forcepoint. | 10
RESPONDING AND REMEDIATING WITHIN 72 HOURS– WITH UEBA
DATA SOURCES ANALYTIC ENGINE INFORMED NARRATIVE⟩ ⟩

11. Copyright © 2018 Forcepoint. | 11
❑ Assess current data protection practices
❑ Create a data protection governance structure
❑ Maintain a personal data inventory
❑ Create information notices
❑ Maintain consent mechanisms
❑ Apply technical and organisational controls
❑ Perform Data Protection Impact Assessments (DPIA)
❑ Report personal data breaches to Supervisory Authority (SA)
GDPR PRACTICAL CHECKLIST:
Source: https://www.forcepoint.com/solutions/need/eu-general-data-protection-regulation-gdpr
GDPR: http://ec.europa.eu/justice/data-protection/reform/files/regulation_oj_en.pdf
Forcepoint is here to help!

12. Copyright © 2018 Forcepoint. | 12
Learn More!
https://www.forcepoint.com/GDPR

13. Copyright © 2018 Forcepoint. | 13
Join us for our next
webcast
Have You Outgrown Your Web Security?
Wednesday, June 13, 2018
2:00 pm EST |1:00 pm CST | 11:00 am PST