Vendor Breaches, Shared Responsibility and the Contract Clauses Security Teams Should Care About

Data privacy attorney Haylie Treas will speak at CYBR.SEC.CON., a two-day conference focused on educating cybersecurity practitioners about the latest updates in the field and how they affect companies and advisors. Haylie's presentation will focus on third-party vendor incidents, explaining not only the legal and operational consequences of a vendor data breach but also why vendor security reviews and contract terms are so important for mounting an effective response to a cybersecurity incident. She will identify the contractual provisions on which security teams need to focus during drafting, including notification duties, audit rights, security and data processing terms, indemnities, liability limitations and subcontractor controls. The session will help security professionals pinpoint the areas where companies and vendors need to align to ensure shared responsibilities are clear and all parties can cooperate smoothly if a breach occurs.