Information Systems Security Association International (ISSA Intl)

Tomorrow at 1 PM EDT.
How do organizations manage transparency obligations when parts of the truth cannot legally be disclosed?

ISSA Privacy SIG's session "What They Don't Know CAN Hurt Them" is tomorrow, and it's one of the more practically useful privacy sessions you'll find this year.

Join Kimberly Lancaster and Lisa Gavin for a practical discussion on disclosure gaps, escalation design, and operational risk.

Register now: https://issa.org/event/what-they-dont-know-can-hurt-them-ignorance-by-design-in-privacy-law-carve-outs/

One of the biggest takeaways from today’s discussion on DLP:

Security teams aren’t overwhelmed because they lack visibility.
They’re overwhelmed because they can’t confidently separate signal from noise.

That led to a really interesting conversation around whether legacy DLP approaches can realistically keep pace with modern data environments—or whether the underlying model itself has to evolve.

Some strong points raised during the session:
• Why false positives remain such a persistent problem
• How context changes classification accuracy
• What security teams should really ask vendors when evaluating “AI-powered” claims
• Why “more alerts” doesn’t necessarily mean better protection

What do you think?

Can traditional DLP continue to evolve effectively, or does the approach itself need to fundamentally change?

Thanks to Alex Grohmann, Christopher Hoesly, and Yonatan Striem Amit for the conversation today.

If you missed the live session, the replay is now available on demand.
https://issa.org/event/the-dlp-accuracy-problem-how-ai-finally-fixes-false-positives/

Recognition matters.

On September 10, the ISSA International Awards Gala will bring together cybersecurity professionals from around the world to honor those who have demonstrated exceptional leadership, service, innovation, and commitment to advancing our profession.

From award recipients to ISSA Fellows and Distinguished Fellows, this evening celebrates the individuals helping shape the future of cybersecurity.

📅 September 10, 2026
📍 Colorado Springs, Colorado

Save the date and plan to join us.