Rules of Engagement - Mitigating Risk in Information Security Work

Learn essential strategies for mitigating risks in information security work from legal expert Richard Goldberg in this 31-minute conference talk from Dojocon 2010. Explore key topics including penetration testing, audits, data breaches, shareholder derivative actions, and subpoenas. Gain insights into developing effective rules of engagement, creating recovery plans, and implementing robust data security measures. Understand the legal implications of information security work and discover practical approaches to protect your organization from potential threats and liabilities.

Introduction
Disclaimer
Call It Art
Overview
Future Security
Penn Tests Audits
Data Breach
Shareholder Derivative
Subpoena
Rules of Engagement
Problem Assume
Recovery Plan
Response
Data Security