The [InfoSec] Stack

Originally published 23 November 2020.

With the GDPR and the legal situation we have regarding data protection within the EU, we often talk about how difficult, if not impossible, it is to use some of the world's largest cloud services. The recent dilemma of the invalidation of the important, legal, mechanism - Privacy Shield - makes it all the more difficult.

But what if one refuses to believe that there are any good alternatives? What if one firmly believes that the digital transformation can not be carried out with any other provider?

Well, then one should probably, first and foremost, realise how much one is depending on one single supplier and think about how healthy that might be. First and far most from a business continuity perspective but also when it comes to ones' data subjects' personal integrity.

But let's not be so negative all the time. We have really given this some thought and here are some tips for European companies who wants to, or just needs to, keep using Microsoft 365.

https://citynetwork.eu/podcast

We have been talking a lot about the negative aspects of the IT industry lately. It's always easier to be negative and criticise so we made ourselves come up with a couple of positive aspects in this weeks episode.

Originally published 28 September 2020.

https://www.youtube.com/channel/UCMctd-YoxlHTTjSU6-qkHJQ

https://www.tbriankight.com/

https://citynetwork.eu/podcast

Kim embarks on a quest in the spirit of digitalisation. The question is, can, and if so, how can a digital meeting be made equivalent to a physical encounter between people. Is he just old and incapable of understanding and absorbing what the youngsters seem to have down to an art, or is there a point in finding other ways?

https://citynetwork.eu/podcast

Today we're discussing how skewed the it industry has become.

https://citynetwork.eu/podcast

We recently interviewed Johan Magnusson, - Associate Professor, division director and researcher in balancing of efficiency and innovation in the governance of digitalization. This is a summary of that interview which we conducted in Swedish.

About Johan

Johan Magnusson is Associate Professor at the Department of Applied IT, University of Gothenburg, head of the Informatics division and director of SCDI Gothenburg. He earned his PhD in Business Administration (Accounting) at Gothenburg University in 2012 following his Licentiate degree in Informatics in 2005.

Johans research concerns the balancing of efficiency and innovation in the governance of digitalization. He works closely with primarily executives to offer insights into how governance can be designed to enhance digital capabilities in large organizations, both in his research as well as in executive education. He is also highly active in the industrial community, with recurring keynotes and media appearances intended to increase the utilization of research findings. He is principal investigator in the Digital Government research consortium, where the researchers work with a research-based model for digital maturity in supporting the digitalization of the public sector.

More information about Johan, his research, keynotes, and projects can be found here: https://scdi.se/researchers/johan-magnusson/ (info in english)

https://citynetwork.eu/podcast

One of our audience members asked us if the number of requests for customer data, presented by Microsoft, can be trusted when gag orders are at play. Here is our take on the matter.

Microsoft's U.S. National Security Orders Report: https://www.microsoft.com/en-us/corporate-responsibility/us-national-security-orders-report?activetab=pivot_1%3aprimaryr2

Microsoft Law enforcement request report: https://www.microsoft.com/en-us/corporate-responsibility/law-enforcement-requests-report

Fisa court on Wikipedia: https://en.wikipedia.org/wiki/United_States_Foreign_Intelligence_Surveillance_Court#:~:text=The%20United%20States%20Foreign%20Intelligence,United%20States%20by%20federal%20law

Our interview with André Catry: https://anchor.fm/the-infosec-stack/episodes/Summarising-our-chat-with-Andr-Catry-et5vom/a-a50ncqt

Originally published on September 21, 2020.

On July 16, the Court of Justice of the European Union invalidated Privacy Shield as a mechanism for legal data transfers between the EU and the US. In this episode we're discussing this important ruling and a FAQ that the European Data Protection Board has compiled for stakeholders that are transferring personal data to cloud services such as Microsoft 365, Amazon AWS, Azure and Google G Suite.

Video: Max Schrems at the Hearing of the European Parliament on EU-US Data Transfers (26:30)

European Data Protection Board publishes FAQ document on CJEU judgment

Podcast webpage

Originally published October 5, 2020

Today we're talking about data transfers to a third country with a focus on the U.S. due to the fall of Privacy Shield.

The Swedish Data Protection Agency has produced an excellent guide on the matter and today we're covering it thoroughly.

With the fall of Privacy Shield, everything regarding global digitalisation has turned upside down. Are we allowed to transfer, process and make data available to the U.S. Which legal mechanisms can you use to do so? What are Standard Contractual Clauses? We will of course not cover all of this in one go but rest assured that we'll come back to this subject in future episodes.

"The Old Directive" as mentioned by Kim

Transfer of data to a third country

https://citynetwork.eu/podcast

This week we're talking about group development and how to measure it. As the nice people we are, we brought along Andrea, one of newest employees who started working for City Network on the same day we recorded this episode.