My firm is trying to spin up a new Privacy/Data Management/Cybersecurity practice and I'm spearheading it. What are y'all's preferences when it comes to software for privacy practitioners particularly when it comes to things like developing/implementing a privacy program for a client, evaluating third-party risk management, data inventory & mapping, etc. I've passed my CIPP/US recently, but now I need to figure out the business and ops side of things. Thanks for any recs y'all have.

like
Posting as :
works at
You are currently posting as works at

That’s a tough one- consider your needs and the complexity of the organization(s) you work with. All GRC tools have their constraints.

like

ServiceNow, OneTrust, or similar vendors.

Cannot only be Excel or Google Sheets 😩

like

I agree on OneTrust as the one to start with - because of its size it’s the one most of your clients that have something in place will have.

Something else to consider - incident response is dominated these days by firms that are on insurance panels and a few well established players on the high end. It’s not the sub-area I would put resources into building first. Compliance, M&A due diligence, and regulatory response are probably better areas to focus on.

likesmart

Good advice, and that’s basically what I’m trying get to us to aim for. IR and breach response are beyond our capabilities as a firm right now (just 16 attorneys). Compliance and “outside privacy counsel/fractional GC” work is certainly what we’re going to start. The goal is to get to do that kind of IR work in a few years time once getting established with this kind of work first. We’re a defense litigation firm so that’s all the partners here know but this will be our first foray into direct representation of clients on non-litigation files.

Build up a team of lawyers, engineers, and analysts that can communicate vertically and laterally.

like

We've had OneTrust but are looking at Securiti. They have advanced data discovery tools that will help make mapping and DSRs simpler

like

I would caution anyone that says they make mapping and DSRs simpler.

like

BigID!

like

OneTrust

like

OneTrust has most market share for privacy operations. ServiceNow big market penetration overall including third-party risk management. Lots of other modules too. Others are coming for their piece of the pie but all have pros/cons.

Privacy program comes first. The tool, just like any other tool is to help but without a program first the tool will do nothing.

like

I wouldn’t doubt it. Service Now’s primary function didn’t include privacy. OTs did and they do a good job in that space but they struggle in some areas where they have expanded services. All these platforms have nuanced issues.

Related Posts

Need career advice. Trying to break into a finance role, preferably an Analsyt role but I have no transferable experience. I worked as a mortgage loan officer (which is sales) for 2 years after college, but since mortgage is such a niche industry, no hard skills transfer and have no relevant undergrad internships unfortunately. I know I can essentially get any sales job I want in finance IE: financial advisor etc. but don’t want to be stuck in sales forever. Any advice?

like

Hello All,

Need some insights on
Adidas Gurgaon techub!! Working culture , growth , office, tech stack and management. Adidas

like

Hi,

I have joined Amazon as a Support Engineer(L4) but quite eager to move into a SDE Role. I’m currently unable to figure out a roadmap for the same.

Does Amazon provide any set of resources for upskilling?

What areas to focus on considering myself being a beginner to coding/design stuff & the big question Where to start?

Thanks Again :)

like

Fifth year labor and employment associate at Big4 L&E firm (think Littler) and am considering making a move into big law (think Jones Day, Goodwin, etc.) Any thoughts on if it’s worth it this late in my associate career? Also, do those big firms take 6-8 year L&E laterals?

like

How's the job market lately? I'm considering quitting, moving there, then starting my search. Do you think it'd take more than a few months (say, 6 max) to land a good role?

I’m currently a Risk Analyst and a full time MBA student. I don’t have any experience working on the investment side of the bank but I would really like to pivot into an investment analyst role. I’m from America, but currently working in London and would really like to stay here. Does anyone have any tips or advise that might help me land an investment analyst role in London?

like

Has anyone switched to an IA SOX focused team or firm after working in a broader IT Compliance
Role? Trying to gauge / understand if the project work kept you interested or became mundane.

like

I'm interested in applying for a Senior Program Manager role at Splunk. Does anyone have insights into that specific role there? Culture, balance, career path? Thanks!

likesmart

One of the major challenges I've encountered in starting a union in my workplace is that people who are woke enough to know we need one are also the ones smart enough to jump ship.

likehelpful

For those of you who are SHRM CP certified. Can you please advise if the SHRM learning system is worth it? Are there other effective learning tools that are less expensive ?

like

Currently working at a large recruiting company and am doing well, but feel like my company is full of psycopaths and the bonus structure borders on theft. Thinking of going solo as a recruiter - does anyone have any experiences to share regarding possible non-competes after quitting and/or experience of going solo? Thanks!

like

Hello People,

Just wanted some suggestions i have been working as a python developer for the last 3 years
Now I am thinking of switching to a data engineer position I need your suggestions is it good to switch or a python developer It is good to continue or what's your suggestions thanks in advance

like

Hello everyone. I’m currently interviewing with Oracle for a program director role and I’m nervous. Any tips or pointers you guys can help me with to secure this role would be certainly appreciated.

Thank you Oracle

like

Anybody have idea of how much YOE needed to get promoted to Senior Software Engineer at Qualys ?

like

Not in my 30s or 40s but looking to network with people in industry. I am a fun person so you will not get bored :)

like

I am considering uprooting my family and moving to TN for a better quality of life. I am having one heck of a time trying to find a new job while states away, while working full time. Does anyone have any pointers? The thought of this move makes me wish I could just quit now.

like

I am looking to get into technical/engineering sales. Does anyone have any recommendations of where to start or places to look at? LinkedIn and other job postings sites are overwhelming and I’ve always wanted to get into sales. My background is industrial engineering with a minor in business and my current role is a mechanical engineer in manufacturing with about 6 years of experience. I want to work for a company or sell something that I am passionate about or have an interest in. Thank you!

like
like

Hello Fishes,
I bagged an offer letter from Global Logic, for Automation Testing, but after connecting with team got to know they are using out dated tools for testing but while interviewing they asked about the latest tools which there in the market.
So can anyone guide me what to do now , is there any criteria to switch the project inside the GL only? How easy is getting to another project with GL?

I’m 30, should I consider joining S& Middle East as Senior Associate in attempt to make Manager and leave? Is it too exhausting? Will I burn out before I get there? And how long to Manager?

like

More Posts

Any tips on how to quantify work as an EA? I’m having trouble with this part but I’ve heard it’s necessary. Also what would be considered a KPI for an EA? That’s not something we tracked at my last job. TIA!

like

Tips for becoming more independent as you progress from junior to midlevel? I am starting to be put into the position of just having to handle things including drafting and could use some advice from others.

like

I am in the middle of interviewing. What does a systems engineer do? I come from a software background so I’d be working in that realm of it and happened to come across this position and was considering applying.

like

Hello Fishes,
I'm a product manager in tech space with experience in both business and tech aspects of product management.
I am looking for opportunities abroad in product space preferably in US/UK/Canada/Australia/Singapore
If you could help me with the process or can help with it i would be very grateful to you.
If you are willing to give referrals please DM.

Thank you.

like

What’s the salary range for an operations manager at a startup in TO? Overseeing sales, rev, support, success, and a bit of other company ops stuff. Glassdoor has a big range so I decided to ask here for more insights. Thanks.

like

How do you start waking up early? Always been a night owl and sleep around 1. Wake up at 8/8:30 right before work starts.
I need to start waking up early to get into workout /yoga and meditation routine. I tried today and kept snoozing my alarm for 2 hours.
Weekend is way worse when I sleep around 3 wake up around 10/11

like

Need like for completing profile. Thanks.

like

How is IBM GBS Nordcloud division.
How is IBM these days in terms of job security.
Is offered ctc is too high as per current market ?

Role: Infrastructure specialist Azure
YOE: 7 years 9 month
Offered CTC: 17 LPA.
Skill: Azure ,devops,linux ,kubernetes.

like

Hi all NICE interactive solutions is hiring for various positions. Anyone interested DM me.

Post Photo

Anyone using the ACS yet? Tv, Digital or RADIO? I almost used the radio but client was too scared to switch since it’s new and unknown.

How do you navigate when you've already accepted an offer, but you get a better one? I'm supposed to start a new role tomorrow but got an offer for the job I really wanted, and it pays 50k more. Is it horrible if I quit while having just started?

like

Anyone with experience at Slack have opinions to share? Currently very interested in a specific role there, and would like to know more about what it's like to work there.

like

Does anyone have any advice on how to convince yourself life is worth it when you think it’s not. I’m a 28 year guy, just got laid off from my job, have aspergers, have no friends, can’t find a gf, why do I even try anymore at anything

like
likefunny

Do you shoe check others at the office?

likefunny

How do you spend your precious unwinding time after work? I love binge watching tv shows but realize it’s probably not the healthiest way to wind after a stressful day. Anything fun / low stress yall do?

Note; working out is not a relaxing activity for me so don’t even start with that. Also I am single and have no kids so ..

like
like

I take immense comfort in knowing that chances are, I cross paths with some of you daily. Does anyone else notice this? It’s fascinating.

like

Hi Guys

This is my first month in Nagarro, usually when will we get salary, is it last working day?do we need to wait eod?

Additional Posts in Privacy Law

Not sure if this is the right place, but in a privately owned business located in a right to work state, is verbal abuse allowed and would swearing at and putting down an employee in front of a bunch of other employees and in front of customers be deemed verbal abuse? Can owners demand you work a certain amount of hours a week if it’s 100% commission?

like

Govt attorney here. Trying to jump into privacy now. In house or big law ? Pros and cons in the world of privacy ?

like

How do you all do data mapping? Any good resources or software/useful visualization tools you recommend?

like

I feel like a mega nerd saying this but I just got staffed on my first data breach response and I'm having so much fun! 🥸😅

likeuplifting

What are the best resources you’ve found that walks you through step-by-step, the data incident management process and what to ask your client?

like

I am preparing for the CIPP/US exam using their official textbook (3rd Ed). If anyone has a good outline, would you be willing to share? I tried to create one myself but it is taking way too long :/ Thanks so much in advance!

like

Can we talk about privacy vendors? We are looking for a platform to handle data inventory and/or data discovery, as well as automating the privacy impact assessment process. We already have vendors for DSARs and cookies. Do most people consolidate all these functions to one platform or use multiple? Anyone willing to share vendors they have had good or bad experiences with?

like

Firms hiring in Texas, Iowa or remote? Junior associate with CIPP (US +E), CIPM, and a post-grad fellowship in cybersecurity.

like

Anyone have any suggestions on how to break into this field as a mid-level commercial litigator? I was thinking of taking the CIPP-US test but would that be enough to get some interview traction?

like

Is it normal for a California employer to include a very detailed notice in the employee handbook about employee monitoring practices and the company’s right to search your stuff? Or do I need to look for a new job immediately….. 🚩

like

Advice needed!! Have 8+ years of compliance/legal/in house experience (not privacy law except HIPAA). I really want a Privacy Counsel role so I took and passed the CIPP/US and CIPM exams this past year. I’ve been offered an Associate Director job at PwC. Is this a good stepping stone to a Privacy Counsel role? How long should I expect to work at PwC before I could apply to Privacy Counsel roles??

like

Best law firms in NYC for privacy law, especially if you’re a judicial law clerk with no experience but studying for the CIPP/US?

like

I’m currently doing IR work but would like to do something more on the technical side (ie: more forensics or technical). Does anyone know if forensics firms or any firm that offers a mix ? I have both a Cipp-Us and cyber/ Sec+ certs.

like

What industry in Atlanta offers the best prospects (most demand) for privacy law/compliance exits?

like

Planning to take the CIPP and CIPM. Will be doing self-study. What is the “book” everyone refers to for studying? Is it just the “study guide” the IAPP sells? Does anyone know if the study guides and sample questions you can buy on amazon are sufficient to use for passing? Appreciate any and all advice.

like

Hi all! I’m inclined on taking up the CIPM training and certification exam. I’m already a certified Data Protection Officer in the Philippines. I intend on skipping CIPP as it applies to the US and EU.

How difficult was the exam? Can you share your experience studying for the CIPM exam? Is it advisable to skip CIPP?

Many thanks in advance.

like

In terms of taking the next step to elevate your career- what items are you heavily focusing on? I have speciality in data governance as well as product counseling, but curious to know what others find most helpful in their practice areas.

likehelpful

Can you incorporate SCCs by reference in a DPA?

like

For anyone who has the CIPP/US certification, how long did you study for the exam?

like

What circumstances under the Gramm Leach Bliley Act would trigger reporting to the FTC, if at all?

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal