Peter H. Gregory, CIPM(R), CISA(R), CISM(R), CRISC(R), CISSP(R), CDPSE, CCSK(TM), is a career information technologist, conference speaker, and security leader. He is the senior director of cyber GRC in a telecommunications company and the author of over forty books, including CISA Certified Information Systems Auditor All-in-One Exam Guide, Fourth Edition, and CISM Certified Information Security Manager All-in-One Exam Guide.

Introduction
Chapter 1 Developing a Privacy Program
The Privacy Vision
Establish a Data Governance Model
Establish a Privacy Program
Structure the Privacy Team
Privacy Program Communications
Chapter Review
Chapter 2 Privacy Program Framework
Develop the Privacy Program Framework
Implement the Privacy Program Framework
Privacy Program Metrics
Online Tracking and Behavioral Profiling
Chapter Review
Chapter 3 Privacy Operational Lifecycle: Assess
Privacy Program Baseline
Third-Party Risk Management
Physical Assessments
Mergers, Acquisitions, and Divestitures
Privacy Impact Assessments and Data Privacy Impact Assessments
Chapter Review
Chapter 4 Privacy Operational Lifecycle: Protect
Information Security Practices
Integrating Privacy into Organization Operations
Other Protection Measures
Chapter Review
Quick Review
Chapter 5 Privacy Operational Lifecycle: Sustain
Monitoring a Privacy Program
Auditing Privacy Programs
Chapter Review
Chapter 6 Privacy Operational Lifecycle: Respond
Data Subject Requests and Privacy Rights
Privacy Incident Response
Privacy Continuous Improvement
Chapter Review
Appendix A The Risk Management Life Cycle
The Risk Management Process
Risk Management Methodologies
Asset Identification
Asset Classification
Asset Valuation
Threat Identification
Vulnerability Identification
Risk Identification
Risk, Likelihood, and Impact
Likelihood
Impact
Risk Analysis Techniques and Considerations
Appendix B About the Online Content
System Requirements
Your Total Seminars Training Hub Account
Single User License Terms and Conditions
TotalTester Online
Technical Support
Glossary
Index