On and off, I’ve been researching the legal aspects of incident detection and response for fifteen years, and published more than 25000 words in law journals. So, can that be summarised in less than five minutes? You judge…
And if you’d like to read more, here are the original papers:
- Processing Data to Protect Data: resolving the breach detection paradox (SCRIPTed, 2020)
- Can CSIRTs Lawfully Scan for Vulnerabilities (SCRIPTed, 2014)
- Incident Response: Protecting Individual Rights Under the GDPR (SCRIPTed, 2016)
Here are the slides, and the script.
