The practical steps an organisation needs to take and the
summary
Start by identifying the specific sensitive personal information that will get the organisation into trouble, typically HR and sales records, then segment those parts of the network so only authorized roles can access them. Tie access control to onboarding, role changes and offboarding, and decide whether costly monitoring is necessary or whether strong segmentation suffices. Centralise ownership of subject access requests, reduce email exposure with single instance storage, and require boot encryption for any laptop or USB that holds personal data, with a key‑management plan.
AI-written summary · about
chapters (3)
related talks
31mDemystifying Data Protection: Steps To Find, Monitor And Control Without Chaos
32mI Started My Startup. How Do I Secure It?
30mSecurity Awareness with a Remote Team
35mAppSec Security: The SDLC in the age of agentic
40mA Data Protection Problem: Insider Risk
01h 02mA reasonable guide to security practices
16mSecuring your Cloud infrastructure: a first baseline
15mThink Like an Operative: Protect Sensitive Data