Developing Security Programs to Mitigate Cyber Attacks

Rachael Tenerowicz is the Director of Privacy and Cybersecurity at Uber. She is the primary counsel for the information security team, working on information security issues such as environmental, social, and governance (ESG), and supporting incident response investigations. Prior to her role at Uber, Rachael spent more than eight years working with clients in commercial, product liability, and litigation at Shook, Hardy & Bacon L.L.P. In this episode… In today's privacy and security landscape, security breaches are commonplace – yet the legal terms and conditions surrounding those breaches are often convoluted. As a result, many companies remain unsure about how to effectively handle their breaches. So how can you stay ahead of your breaches and mitigate risks?   Rachael Tenerowicz, Director of Privacy and Cybersecurity at Uber, suggests taking a proactive approach to the cybersecurity disclosure guidelines outlined by the Securities and Exchange Commission (SEC). These guidelines can pose significant risks to your company, so it's important to develop the appropriate incident response measures. Informing your customers of a security breach before disclosing to the general public allows your clients to secure their own data and minimizes your risks of further attacks. In today's episode of She Said Privacy/He Said Security, Jodi and Justin Daniels talk with Rachael Tenerowicz of Uber about developing a robust cybersecurity program to mitigate risks. Rachael provides tips for investors to understand cybersecurity challenges, how companies can prepare for SEC cyber disclosure laws, and how organizations can establish trust with their customers and the public.