Balancing Data Transparency with Privacy and Security

Chris Jennings posed the question:

“Can you share any examples of how to balance data and information transparency with privacy and security?”

Jackie Fernandes jumped in with IT’s mission of building a controls infrastructure across the enterprise, stating it requires everyone's cooperation. And in order to accomplish the effort, the business needs to see IT as a partner. She candidly added, “Most people don't want to see me coming to them because they think they're in trouble. And that's not a good feeling to have!” Jackie shared how she shows them that she is their collaborative partner. She is there to take their mind off any trouble they think they might get into due to violations. However, by building a good controls infrastructure to streamline activities at a very high level, business stakeholders can successfully do their job every single time while meeting compliance regulations and obligations. Jackie concluded with, “Essentially, privacy and security is everyone's responsibility.”

Tony Murabito built on Jackie’s advice by saying, “Let the organization see everything you're working on [which includes]:  

• Here's our current project list;
• Here are the next set of projects;  
• Here are our strategies;
• Here is our security.”

Tony added how he creates a cadence with the organization to make them aware of security and potential risks in a visible fashion. “For example, I tell everyone, hey, we lost $300,000 three years ago. That's not going to happen again. And that's why we do intensive phishing tests. That's why we have a button on your email, etc. Make them aware why you're doing it. Another example, we had to lock down USB devices a year ago, and only open them up for business reasons. Why? Somebody tried to take the whole company with them when they were leaving, and we can't have that. Tell them the truth to let them know what you're dealing with, and they tend to be much more understanding. Again, do it with that sense of visibility, that you're not hiding anything.”  

Jen Heckman agreed with Jackie regarding building trust between the business and IT, “It shouldn't be when we see you coming that we're like, ‘Oh no! I'm in trouble!’ It should be that we're including compliance and privacy right out of the gates and building cross-functional collaboration and trust.”

The following articles provide snapshots of more topics the panelists discussed:

• Data Changes from R&D, Preclinical, Clinical and Beyond
• Data Success Stories in the Biotech Industry
• Avoiding and Mitigating Common Data Risks in Biotechs
• Tackling Portfolio Expansion Hurdles in Life Sciences

Watch the panel discussion on demand in its entirety here (1:03:04).

‍