Inside Data Xposure: Meet Your Hosts and Learn the Mission | Episode 0

欢迎来到Data Xposure，专为数据风险领导者打造的播客。

Welcome to Data Xposure, the podcast for data risk leaders.

我是Jenny Hamilton，Exterro的总法律顾问。

I'm Jenny Hamilton, the general counsel for Exterro.

我是Fahad Diwan。

And I'm Fahad Diwan.

我专注于数据隐私、安全与治理，确保良好的初衷能够经受住法律的检验。

I focus on data privacy, security, and governance, and making sure good intentions survive legal scrutiny.

我是Justin Tolman，因为当事情严重出错时，你需要进行法证调查来确定是谁泄露了你的数据。

I'm Justin Tolman, because when things go very wrong, you're going to need a forensic investigation to determine who exposed your data.

在我们深入探讨趋势和洞察之前，我们想花一点时间让你认识一下我们——你们的主持人，并分享我们创办这档节目的原因。

So before we dive in to trends and insights, we wanna give you a moment to meet us, your hosts, and share why we launched the show.

因为在企业数据的每一个角落，都蕴藏着价值。

Because in every corner of enterprise data, there's value.

而同时，也存在着风险。

And well, there's risk.

对于法律、隐私、安全和数据治理领域的领导者来说，这是一场每日的平衡艺术。

And for legal, privacy, security, and data governance leaders, that's a daily balancing act.

如果你是负责保护、保存和证明数据安全的人，我们看得见你。

And if you're the one responsible for keeping data protected, preserved, and provable, we see you.

这个播客就是为你而做的。

This podcast is for you.

所以在今天的节目中，我们将剖析数据泄露为何存在，以及为何现在是进行这一对话的关键时刻。

So in today's episode, we're gonna break down why data exposure exists and why now is the critical time for this conversation.

我们还会分享一些我们的观点以及这些观点的形成背景，然后介绍接下来你将听到的故事和专家见解。

We're also gonna talk about some of our perspectives and what shaped them, and then what you can expect from the stories and the experts ahead.

那么，我们开始吧。

So let's get into it.

首先，Fahad，既然你一直身处合规项目的核心，过去几年里有哪些变化让此刻如此关键？

So first, Fahad, why don't you share, since you've worked in the thick of compliance programs, what's changed in the last few years that makes this moment so critical?

嗯，Jenny，我们正处在第四次工业革命之中。

Well, Jenny, we're really in the fourth industrial revolution.

人工智能正在影响每一个人和每一件事。

AI is touching everyone and everything.

组织中的每个部门都希望利用他们的数据，将其应用于人工智能，以提高工作效率和自身效能。

Every department in an organization wants to leverage their data and put it in AI to make their roles more efficient, to make themselves more effective.

随之而来的是大量的数据风险。

Now with this comes a lot of data risk.

这种数据风险不再仅仅局限于信息安全部门或隐私合规部门。

And this data risk is no longer just localized to the information security department or the privacy compliance department.

它已经蔓延至整个组织。

It has sprawled across the organization.

因此，这个时刻如此关键的原因在于，我们看到组织内每个人都在生成和使用数据，这产生了巨大的风险，需要来自不同部门的不同利益相关者协同合作，以缓解这一过程相关的风险。

So what makes this moment so critical is that we're seeing everyone generating using data throughout an organization that's generating a massive amount of risk, and it's requiring different stakeholders from different departments to work together to mitigate the risks associated with this process.

珍妮，作为总法律顾问，你亲眼目睹了法律团队如何被卷入从数据泄露响应到供应商审计的方方面面。

Jenny, as a GC, you've seen how legal teams are being pulled into everything from breach response to vendor audits.

是什么促使你创办了这样一个播客？

What made you wanna launch a podcast like this?

有几个原因。

A couple of reasons.

首先，法律部门通常是最后一道防线，这要求我们密切关注当前正在出现的风险趋势和洞察。

So first, legal is often the last line of defense, and that requires us to try to stay abreast of what are the current risk trends and insights that are unfolding.

而且我们也是受过训练的执行者。

And we're also trained executors.

当涉及到客户的风险暴露时，我们必须阻止风险球进入球门。

We have to stop that ball from reaching the goal when it comes to the risk exposure of our clients.

我认为技术让这一切变得非常困难，因为没有任何现成的蓝图。

I think that the tech makes this really difficult because there's no blueprint.

在法学院或我们职业生涯初期，我们并没有接受过针对这些问题的标准化检查清单训练。

There's no checklist of issues that we've been trained on to spot in law school or early stages of our practice.

因此，我们必须保持关注。

And so we have to be paying attention.

同时，我们还需要借助社群的力量。

And we also have to leverage the power of community.

在这个世界上，社区的力量至关重要。自从我二十年前踏入这个行业以来，这一直是法律顾问管理风险的首要方式。

The power of community in this world starting, you know, when I went in the house almost twenty years ago, has been absolutely the number one ways that attorneys who advise in this area have been able to, you know, manage risk.

无论是受严格监管的公司还是不受监管的公司，了解当前的趋势、其他律师和客户尝试过哪些有效和无效的做法，都至关重要。

It's what the trends are, whether you're a heavily regulated company or you're unregulated, what different attorneys and clients have tried that works and what doesn't work.

该在哪里花钱，不该在哪里花钱。

Where to spend money, we're not to spend money.

因此，我认为我们正试图借助社区的力量，以及我们在行业思想领导力中的参与，将这些经验传递给听众。

So I think that's where we're trying to leverage the power of community and our participation in industry thought leadership and bring that to the audience.

珍妮和法哈德，你们两位都提到了法律、安全、IT等角色的转变。

Jenny and Fahad, you both mentioned this conversion of roles from legal, security, IT, all these things.

我在法证领域每天也都能看到这种情况。

I see that every day in forensics as well.

这与信息治理密切相关，而信息治理是在这三个领域中执行工作的最大影响因素。

And this plays into information governance, which is the biggest influence when it comes to executing in all three of these disciplines.

如果你不保留数据，你就不会丢失数据，数据也就不会伤害你。

If you aren't retaining the data, you can't lose the data and that data can't hurt you.

在数字取证中，这是一个寻找并构建与那些不该移动的数据相关的活动时间线的过程。

So in digital forensics, it's process of finding and building the timeline related to the movement of that data that shouldn't be moving.

贾斯汀，你在执法和数字取证方面有丰富的经验。

Justin, you have a deep experience in law enforcement and digital forensics.

那么，这让你对现实中的风险有了哪些认识？

So what does that teach you about real world risk?

谢谢。

Thanks.

这让我看到了这些风险所带来的切实后果。

That has shown me the very real world consequences to those risks.

在调查过错误或日常数据风险带来的后果后，我亲眼目睹了信息泄露所造成的真正损害。

Having investigated the fallout of mistakes and or just the daily run of data risk, I've seen very real consequences of that information getting out and the damage that it can cause.

这可不是什么好事。

It's it's not a good thing.

珍妮，你曾身处企业内部。

Jenny, you've been inside corporate walls.

公司对数据最大的误解是什么，法律团队需要如何应对？

What's the biggest misconception companies have about data that legal teams need to navigate?

在过去近二十年里，我在企业内部看到的最大误解是，业务部门认为他们有时间跟上风险，他们会先利用数据获利，或者收集数据以备未来变现。

The biggest misconception that I've seen over the last nearly twenty years inside, you know, mostly in house walls is that the business will have time to catch up to the risk, that they'll monetize the data, or they'll collect the data for future monetization.

然后某一天，就像一条折线图，数据量和他们销售的产品数量都在上升，而风险也随之沿着这条曲线攀升。

And then at some point, it's like a line graph, the curve's going up, the volume of data, the volume of products they're selling, that the risk is just following that curve.

但现实是，在企业刚起步时，你就已经面临风险，这些风险可能日后根本无法追赶，因此必须从一开始就设计防护措施和合规机制。

And the reality is right at the inception of going into business, you have risk that you may not be able to catch up to later on and need to design in guardrails, design in compliance.

这几乎就像你最擅长的领域，法哈德——隐私设计。

It's almost like your favorite subject, Fahad, privacy by design.

这会让它们落后，而且几乎是呈指数级地落后。

And that puts them behind, but not it, like, almost puts them behind exponentially.

还有另一个相反的误解：一旦你在管理数据风险方面落后太多，就再也追不上了，不如等到明年再申请大笔预算或更多人力。

There's a second misconception that goes the other way, which is once you've gotten too far behind on managing your data risk, that you can never catch up, and you might as well punt it to next year when you can get like a big budget or a lot more headcount.

但现实是，这种情况根本不会发生。

And the reality is that actually never happens.

而且，你有实际的方法可以掌控它。

And there are practical ways you can get your arms around it.

你可以管理数据风险，而无需做那些事情。

You can manage data risk without without doing those things.

法哈德，你曾经从事法律工作，后来转做咨询，现在在Exterro负责产品。

Fahad, you practiced law and then did consulting, and now you're at Exterro in product.

随着技术威胁快速演变，你如何让数据治理、隐私和隐私项目保持相关性？

How do you keep data governance, private and privacy programs relevant as tech threats evolve so fast?

嗯，我的律师工作和我现在的工作有很多相似之处。

Well, there are many similarities between my work as a lawyer and the work that I do now.

在这两个角色中，我都帮助组织管理其数据的风险，包括当前的风险，以及一些难以察觉和预测的未来潜在风险。

In both roles, I help organizations manage risks to their data, both current risks and also future nebulous risks that are sometimes hard to see and hard to predict.

作为一名律师，我主要通过起草基础性文件，如隐私政策，并保持所有语言足够宽泛，以涵盖未来可能出现的问题。

As a lawyer, I did this mainly through drafting foundational documents like privacy policies and keeping all the language broad enough to capture future issues.

在我目前的职位上，我则通过技术来实现这一点。

In my current role, I do that with technology.

我帮助构建能够应对当今风险，同时足够稳健以应对未来风险的技术。

I help build tech that can address the risks of today, but is robust enough to address the risks of tomorrow.

我们来谈谈格式。

So let's talk format.

我们每期节目都会从一个事件或热门话题开始，这些是我们的听众正在讨论的内容。

We're gonna start every episode with an event or timely topic, something our listeners are talking about.

为什么这样做是切入点呢，珍妮？

Why is that the hook, Jenny?

这是个好问题，法哈德。

That's a good question, Fahad.

很高兴你问到这个问题，因为我们拥有庞大的客户群，覆盖所有行业，无论他们是否受到严格监管，我们都希望分享我们观察到的趋势，让你了解那些你可能还不知道的动态，或者只是支持你正在参与的讨论。

I'm glad you asked because we have such a large customer base that cuts across all industries, whether they're heavily regulated or not yet regulated, that we want to share the trends we're seeing, that you may be wanting to know what's happening out there that you don't already, or we just wanna support conversations you're already participating in.

我们还会引入生态系统中的各种声音。

We're also bringing in voices across the ecosystem.

法哈德，我们应该邀请什么样的嘉宾呢？

What kind of guests, Fahad, should we expect?

我们的嘉宾将包括来自全球各地的数据领导者。

Our guests should expect data leaders from across the world.

他们将听到首席隐私官、首席数据治理官、信息安全负责人、总法律顾问等关键人物的深刻见解，不一而足。

They should expect listing from key insights from chief privacy officers, chief data governance officers, information security leaders, General Counsel, you name it.

这些是当前正在一线应对和缓解数据风险、同时面对新风险涌现的人们。

The people that are in the trenches today managing and mitigating data risk as new ones arrive.

然后，我们将在每集结尾设置一个‘重启时刻’，帮助你们将专家分享的概念应用到实际中，更好地在组织内部沟通，以降低风险。

And then we'll end each episode with a reset moment so that you can apply the concepts shared by the experts in how to better communicate across the organization to minimize risk.

好了，关于《数据泄露》预发布节目的内容就到这里。

So that's a wrap on our prerelease episode of Data Exposure.

我们非常期待邀请您加入这场对话与洞察。

We are excited to bring you into the conversation and the insight.

如果您正在主导数据决策，或正在应对决策失误带来的后果，这个播客就是为您打造的。

If you're leading data decisions or dealing with the fallout when they go wrong, this podcast is built for you.

现在就订阅吧，告诉您的团队，做好准备，因为隐藏在您数据背后的威胁，可能让您付出一切代价。

So subscribe now, tell your team, and be ready because what's hiding your data could cost you everything.

谢谢收听，欢迎来到Data Xposure。

So thanks for listening, and welcome to Data Xposure.