106: Third-party Risk: Creating an Effective Information Security and Data Privacy Assessment Program for Third-party Vendors

Transcription

1 Print Page 2016 ACC Annual Meeting October 16-19, San Francisco, CA Monday, October 17, :00 AM - 10:30 AM 106: Third-party Risk: Creating an Effective Information Security and Data Privacy Assessment Program for Third-party Vendors Karen McGee Assistant Director, Privacy & Security, Legal Intel Corporation Sarah Sederstrom Senior Legal Counsel Wunderman Lisa Zolidis Privacy Counsel - Americas Dell Inc. 1 of 5 10/13/16 12:02 PM

2 2 of 5 10/13/16 12:02 PM

3 Faculty Biographies Session 106 Karen McGee Karen McGee is assistant director, privacy & security, legal at Intel Corporation. Her career has focused on providing her technology clients with business-oriented legal guidance on e-commerce, data privacy, cyber security and compliance. At Intel, she provides legal support and guidance to the Internet of Things, information security, and new technologies business groups. Prior to joining Intel, she served in multiple leadership roles. During her tenures at LifeLock and ID Analytics, she was responsible for data privacy, cybersecurity, records and information management, regulatory compliance, intellectual property, and infrastructure technology with critical focus on incident response management and preparedness. She has built and matured data privacy compliance programs in each of her roles. While at APL, she developed expertise in government contract compliance and spent several years training staff in countries throughout the Middle East, Asia, and Europe. She obtained her BA from the University of California at Berkeley and studied abroad with the American Institute of Foreign Study. She is a Certified International Privacy Professional and received her JD from the University of San Francisco School of Law. Sarah Sederstrom Sarah Sederstrom is currently senior legal counsel at Wunderman where she focuses on negotiation of transactions, technology, privacy, risk, and regulatory compliance. She works closely with her 3 of 5 10/13/16 12:02 PM

4 Information Security Team, CIO, CPO, VP-HR and other executives to develop strategies and policies, as well as provide advice to mitigate risk, including contractual risk. She sits on the executive committee responsible for oversight of privacy impact assessments, third party privacy / security assessments, and cybersecurity incidents. Prior to that, she was in-house counsel at Wells Fargo negotiating high risk transactions, while also serving as the escalation point for other negotiators on a large variety of transactions as part of the Shared Services area and developing policies and procedures relating to risk mitigation. Prior to that, she negotiated various transactions at Metris (now HSBC). In her previous career, she held various consulting and accounting roles. Ms. Sederstrom has been on several non-profit boards, currently serving on her ACC-Minnesota local chapter board as secretary, and is currently a volunteer mediator with the State of MN Human Rights Department. She has served as adjunct faculty at Hamline University and the University of Phoenix (Minneapolis campus). She received her BA from St. Catherine University, her MBA from The University of St. Thomas, and her JD from Hamline University School of Law. Lisa Zolidis Lisa Zolidis serves as privacy counsel for the Americas region at Dell. She also coordinates global issues among her fellow regional privacy counsel. Ms. Zolidis evaluates new and existing programs for compliance with applicable privacy laws, assesses and assists in integration of new acquisitions, develops company policies and programs to enhance protection of personal data, and negotiates information protection agreements with vendors and 4 of 5 10/13/16 12:02 PM

5 customers. She has worked extensively on international data transfer issues and co-leads a Dell team preparing for implementation of the European Union General Data Protection Regulation. She also serves as privacy subject matter expert for continuous improvement and operation of the company s third party oversight programs. Prior to joining Dell, Ms. Zolidis was a litigation, regulatory and privacy attorney at American Airlines. She spent the first several years of her career as a litigation associate in private practice in New York City. Ms. Zolidis co-chairs the Big Data Subcommittee for the ACC IT, Privacy and E-commerce Committee. She is an active member of the International Association of Privacy Professionals, and served as a Knowledgenet chair for the Austin IAPP chapter. Ms. Zolidis is a prior active member of the New York State Bar Association Committee on Civil Rights. She chairs Dell Legal s pro bono committee and serves on its diversity committee. Ms. Zolidis earned a BA from the University of Texas and her JD from New York University School of Law. 5 of 5 10/13/16 12:02 PM