Privacy Firefighting: Incident Management Lessons from (Literal) Fires
summary
Meta documents two concrete incidents—a stolen unencrypted payroll drive and a live stream where non-friends could comment—and treats vulnerabilities like active incidents, preferring false positives to missed problems. The response uses an on-call lookup, robo-dial that bypasses silent mode, a centralized incident tracker with regular 20-minute status checks, and splits large events into mitigation and forward-fix work streams. Postmortems gatekeep detection, escalation, remediation, and prevention and trigger formal follow-ups when any area is weak.
AI-written summary · about
chapters (5)
- 0:00Introduction
- 0:50What is a privacy incident
- 1:45How to handle a privacy incident
- 5:40Communication
- 7:10Review
related talks
41mFundamentally Flawed: Privacy, People and the Age of Data
30mArrested DevOps Live...
29mManaging Privacy and Cyber In A Pandemic: Lessons Learned For 2021 & Beyond
49mHow to Kick Off Privacy Engineering Within a Security Team
40mExtreme Makeover: Privacy Edition
37mFrom the Trenches Privacy Engineering Pitfalls Successes
30mMaking Privacy Assessments More Efficient
22mThe Data Breach vs The Ethics Breach: How to Prepare for Both