The document discusses the challenges companies face in achieving GDPR compliance, highlighting that a significant number of FTSE 350 and Fortune 500 companies overestimate their readiness. It emphasizes the importance of data tracking, security controls, and the role of a dedicated GDPR team across various departments. Additionally, Zscaler offers solutions such as SSL interception and application visibility to aid organizations in their compliance efforts.

1. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION1
ZSCALER CONFIDENTIAL INFORMATION
GDPR – Are you ready?
Key steps to getting it GDPR right
Chris Hodson | Sr. Director, Office of the CISO | Zscaler
Shaun Ghafouri | Associate General Counsel | Zscaler

2. ©2018 Zscaler, Inc. All rights reserved. | ZSCALER CONFIDENTIAL INFORMATION2
To ask a question
• Type your questions into the chat box in the Webex
panel or email us at communications@zscaler.com
• We’ll try to get to all questions during the Q&A
session. If we do not get to your question, we’ll make
sure to follow up afterwards
• At the end of the webcast – please let us know how
we did!
©2018 Zscaler, Inc. All rights reserved.
Ask your question here…

3. The latest research
A majority of FTSE 350 and Fortune 500
companies are overestimating their capabilities
when it comes to GDPR compliance.
92 per cent of European
businesses are
unprepared for GDPR.
According to research from law firm Paul Hastings.
Survey of 400 European businesses
by RSM and the European Business
Awards.

4. GDPR is Here! What now?
Or
Are you
Compliant?
In state of
Readiness?
• Your company is in constant state of change.
• Your processes are in a constant state of change.
What happens to your GDPR Team
going forward?
Legal | Marketing | Infosec | IT

5. What priorities
should drive
your readiness?
Analysis of Data
Retention
Tracking key GDPR Readiness Priorities
Technical Security Data Deletion
Communicating to the
Business
Data Flows

6. What personal information should you be concerned with?
Shoe Size
Eye color
IP Address
“Any information relating to the identified
or identifiable natural person”
Hair Color
DNA
RNA
Name
Address
Phone Weight
Online
Identifier
Income
Cultural Profile
GPS/Localization
Email
Browser Cookies
Race
Religion
Image
Fingerprint
Height
Biometrics

7. Which Security Controls Should be in Place?
Logging Access
Control
Data
Mapping
Authentication EncryptionAnti-Malware

8. What about Shadow IT?
Are you able
to track
unsanctioned
user activity?
We don’t know what
we don’t know
Data ownership
issues
Data flows
Data Protection
Impact Assessment

9. CISO Challenges
• Best of Breed Security
• Privacy by Design
• 72 Hour Reporting
• Encryption Challenges
“Only 20% of GDPR is within my purview!”

10. How Zscaler can Help
SSL Interception at Scale
Application Visibility: All Ports, All Protocols
Payload data is not written to disk
Logging data retained with European Union
Pseudonymisation and obfuscation where required

11. ©2017 Zscaler, Inc. All rights reserved. ZSCALER CONFIDENTIAL INFORMATION.
Thank You!
Questions and Next Steps
11
Chris Hodson
Sr. Director, Office of CISO at Zscaler
chodson@zscaler.com
www.zscaler.com/gdpr
Overcoming the Challenges of
Architecting for the Cloud
Slow Office 365 Deployment?
Let Zscaler help you get in the fast lane!
zscaler.com/webcasts
Shaun Ghafouri
Associate General Counsel at Zscaler
sghafouri@zscaler.com
Learn more about Zscaler and GDPR
zscaler.com/webcasts
Other On-Demand Webcasts

12. ©2017 Zscaler, Inc. All rights reserved. ZSCALER CONFIDENTIAL INFORMATION.
June 25-27, 2018
The Cosmopolitan, Las Vegas
Register at zenithlive.zscaler.com
Join the conversation at
community.zscaler.com