Heureka Webinar – Security, the Growth Engine for eDiscovery Professionals
Download as PPTX, PDF0 likes628 views
The document discusses the integration of security and ediscovery practices, highlighting the need for quick information on various issues such as breaches and compliance. It emphasizes the importance of data analytics, standards like ISO, and the role of legal professionals in enhancing cybersecurity measures. The panelists explore trends, challenges, and strategies for leveraging ediscovery expertise in the security field.
Heureka Webinar – Security, the Growth Engine for eDiscovery Professionals
- 1. Security – The Growth Engine for eDiscovery.
- 2. PANELISTS Nate Latessa Heureka Chief Operating Officer nate.latessa@heurekasoftware.com Ron Copfer CEO ronald.copfer@heurekasoftware.com Donald Wochna Co-Chair, E-Data Law Group dwochna@E-DataLawGroup.com
- 3. HEUREKA OVERVIEW Heureka Meaning: “I’ve found it!” Heureka was formed to allow clients to search and respond quickly to discovery, security, compliance and free-form investigation needs.
- 4. WHY? There is a need for quick information regarding: • Breaches • Data Classification • Lawsuits • Failed Audits • HR Issues • BSA Licensing • Process Changes • Data in the Cloud • IP Loss • Unpatched Endpoints • Proof of Compliance
- 5. HOW? • Endpoint Intelligence • Viewed via the search and correlation platform • Numerous workflows – eDiscovery – Data Classification – Incident and Indicator Response – Audit and Compliance – Free Form Investigation
- 6. WOCHNA LAW BACKGROUND Attorney, Client and Technology: • We embed technology in our legal solutions. • Created an E-data law group • New site opening January 1, 2015 • dwochna@e-datalawgroup.com • 330.815.2891
- 7. OVERVIEW • Trends in eDiscovery and Security • Why security is ready for eDiscovery professionals to lead • How to leverage eDiscovery processes to impact security • Why your experience and expertise is desperately needed • How to cross the boundary, impact your company, and build your career
- 8. PANELIST OPENING COMMENTS How and why did you get from eDiscovery to Security?
- 9. eDISCOVERY AND SECURITY • eDiscovery – Episodic – Non-budgeted – Fractured data repositories – Immature standards • Security – Continuous – Budgets Increasing – Holistic to the Enterprise – Mature standards
- 10. eDISCOVERY AND SECURITY • Similarities – Data explosion – Needle in the haystack identification – Forensic analysis – Malware explosion – Need quicker response time – Need for enterprise-wide data analytics – Both assume huge risks to the business – Challenges in communicating needs to mgmt.
- 11. WHAT ISSUES/COMMENTS/NEEDS HAVE YOU HEARD OR SEEN THE MOST FROM CLIENTS IN THE LAST 12 MONTHS?
- 12. TRENDS • Many articles written in last two years • Executives Taking Ownership of Cybersecurity • Players: IT, Legal, CFO, Insurance, Vendors, Experts • Legal is moving to become CISO
- 13. WHAT ARE THE STANDARDS DRIVING THE INDUSTRIES AND WHAT DO THEY HAVE IN COMMON?
- 14. ISO ALIGNMENT • ISO 9000—requirements and best practices for the quality management systems • ISO 27001, 27002 — The process and controls for an Information Security Management System (ISMS) . • ISO/IEC 27050 — Information technology — Security techniques — Electronic discovery (DRAFT). This ISO standard is within the family of standards that focus on information security management.
- 15. ISO 27050 • The fundamental purpose of the digital forensics standards ISO/IEC 27037, 27041, 27042 and 27043 and 27050 is to promote good practice methods and processes for forensic capture and investigation of digital evidence • This four-part standard concerns the discovery phase, specifically the discovery of Electronically Stored Information (ESI), a legal term-of-art for data.
- 16. IMPACT OF ISO • Rise of Certification to ISO standard – Law firms – Vendors – Experts • ISO standard requires “measurement of accuracy” • How accurate are the results of the ediscovery process used
- 17. WHAT IS THE CHANGE FROM PROCESS TO ANALYTICS IN THE EDISCOVERY FIELD AND WHY IS IT IMPORTANT?
- 18. ACCURACY OF RESULTS • Accuracy of Results measures the output—not the process • Accuracy of Results relates to the Data— not the process • Accuracy of Results requires moving beyond Process and analyze the Data being identified, preserved, and produced
- 19. ACCEPTANCE TESTING • Establish whether or not it can be stated, at a given level of confidence, that recall is at or above a specified level. • EG: a passing acceptance test would allow us to state with a 95% confidence interval that our retrieval efforts have achieved 80% recall or better.
- 20. STANDARDS REQUIRE SAMPLING • Sampling is the “bridge” between e- discovery and cybersecurity. • Sampling applicable to eDiscovery tests the Data—not the process • Tools used in eDiscovery are applicable in cybersecurity to test the Data
- 21. SAMPLING AND DATA ANALYTICS • Data analytics is the key to the future of eDiscovery and cybersecurity • Data analytics is the result of the application of defensible sampling techniques to a universe of data in order to extract reliable intelligence about the data that informs business decisions. • Data analytics is being applied to eDiscovery and to cybersecurity, data breach areas
- 22. EDRM
- 23. R3 MODEL
- 24. USING THE STRENGTHS OF AN EDISCOVERY BACKGROUND, HOW CAN ATTENDEES LEVERAGE THEIR LEGAL CONTACTS AND EDISCOVERY PROCESSES?
- 25. WHAT WOULD YOU RECOMMEND EDISCOVERY/LEGAL PROFESSIONALS LEARN TO INCREASE THEIR REACH AND INFLUENCE?
- 26. PANELIST CLOSING COMMENTS Additional Questions?
- 27. THANK YOU!
- 28. HEUREKA – I’VE FOUND IT! www.heurekasoftware.com
Editor's Notes
- #5: Pain Story – why Something bad happened. People are yelling You're in trouble and you need answers from across the enterprise...ASAP!
- #12: Ron to take lead via remote collections, Don second with cost-effective, standardized solution gets out of spoiliation. Pre-collection analytics from Nate.
- #15: Don to Lead – Maturing industry moving to standardized protocols. ISO is under the security umbrella. Validation. eDiscovery is a process under security and info technology.
- #26: Need to add links