Privacy, Regulations, and Cybersecurity

ACKNOWLEDGMENTS

Every book is a labor of love. This one is no different. After I finished my first baby, Cybersecurity Program Development for Business: The Essential Planning Guide, I knew I wanted to write a second, one specifically focused on Privacy. The initial idea was unformed but persistent. Privacy intrigued me. The “P” word was used practically daily; legislators were passing laws pretending to preserve it while businesspeople were at a loss about what to do with it.

I was clear from the beginning that I did not want to write a scholarly treatment on privacy. Better-equipped scholars of many stripes have produced, and continue to produce, great works on the subject. My approach was to be similar to the first book: What do we need to know on privacy so that we can be informed as citizens and enabled as professionals? More to a pragmatic point, how does all this privacy legislation affect our capacity to design and deliver an effective cybersecurity program?

To answer all these questions, I came up with the format for this book. It would have three distinct parts: one on privacy; one on regulations, worldwide; and one on privacy-centric cybersecurity program development. The latter would be based on the previous book but enhanced by our understanding of privacy, not just as a concept but as a set of concrete regulatory requirements. The result is in your hands!

Books are never solitary efforts. Yes, the image of the writer toiling away at her desk day-in, day-out is ...