Current privacy regulations and frameworks focus on responding to a data privacy loss event and are inadequate in addressing privacy via preventative measures. By addressing privacy risks proactively with a defensive mindset, organizations can avoid judicial and punitive processes, high cyber risk insurance rates, and manage their overall operational risk. One highly effective approach to managing cyber risk proactively is to create a robust security testing program. Join us on Thursday, January 26, 2023, at the next Midwest Cyber Security Alliance (MCSA) meeting to learn more. Sam Horvath and Norman Kromberg from offensive security provider NetSpi will examine: * How to take advantage of security controls for managing both privacy and security related risk * Creating and scaling an offensive security program that accounts for privacy-focused risks and related compliance * How to work with offensive security vendors in creating customized testing programs that address both privacy and security