Kahneman (part 1)
•Download as PPTX, PDF•
3 likes•966 views
Eerste deel van een presentatie over het geweldige boek "Thinking fast and slow" van Daniel Kahneman, een van de twee psychologen die ooit een nobelprijs won. Hij werkte rond beslissingtheorie en de menselijk feilbaarheid op dat gebied. First part of a presentation (in Dutch) on the great book "Thinking fast and slow" by Daniel Kahneman, one of two psychologists to ever be granted a nobel prize. He studied decision taking (strategies) and human falability therein.
Report
Share
Report
Share
Recommended
10 lessen in hoe merken groeien
Tijdens het NIMA Marketing Executive Diner op 9 april jl. heeft NIMA Byron Sharp, schrijver van het boek How Brands Grow en professor of Marketing Science aan de University of South Australia, mogen verwelkomen voor een presentatie over zijn nieuwe, verfrissende benadering van marketing. In dit boek bespreekt Sharp een meer ‘evidence based’ aanpak van marketing. Door de jaren heen hebben marketeers op basis van ervaring en onderbuikgevoel het vak bedreven, zonder al te veel aandacht te besteden aan wetenschappelijk onderzoek. Nu we steeds meer kunnen meten en data gedreven zijn, is het de hoogste tijd om deze aannames te toetsen. In deze presentatie stippen we kort 10 lessen uit het boek How Brands Grow aan die je zeker niet mag vergeten.
"Thinking, Fast and Slow" Applications
This document summarizes key points from Daniel Kahneman's book "Thinking, Fast and Slow". It discusses the two systems of thought - system 1 thinks fast and automatically using mental shortcuts while system 2 thinks slowly and deliberately. It describes cognitive biases like anchoring, overconfidence and regression to the mean that can cause irrational and incorrect judgments. It suggests applying this knowledge can help with design, workplaces and everyday life by recognizing biases and avoiding incorrect intuitions.
DPIA template
This document provides a template for conducting a Data Protection Impact Assessment (DPIA) pursuant to Article 35 of the GDPR. The template includes sections for describing the processing project, assessing the need for a DPIA, detailing the nature and purposes of the processing, evaluating the legality of the processing based on the legal framework, analyzing inherent risks to data subjects, implementing data protection by design principles, assessing residual risks, and involving the data protection authority as needed.
Gegevensbescherming-clausule in (overheids)opdracht
Voorbeeld van een Nederlandstalige clausule die in een overheidsopdracht of Request for Proposal (RFP) kan worden ingesloten om alle verschillende mogelijke samenwerkingsvormen (joint controller, controller-to-controller of controller-to-processor) af te dekken of dat althans te pogen.
20190131 - Presentation Q&A on legislation's influence (on travel management)
Presentation given at the event organised by ACTE and BATM on 31 January 2019 addressing a few questions on the payments legislation that are relevant for travel and expense manager.
GDPR toegepast op huur-verhuur (Dutch)
Deze presentatie gaat in op de toepassing van de gegevensbeschermingswetgeving op verhuuractiviteiten.
Controller-to-processor agreements
A presentation given at the legal hackers meetup of 19 June 2018 on common issues with controller-to-processor agreements aka "data processor agreement" (DPA). We revisit the distinction controller v processor. We then look at the directly applicable duties for processors, which do not need to be inserted in a contract. Finally we look at the different mandatory and "forgotten" components of the agreement.
Recommended
10 lessen in hoe merken groeien
Tijdens het NIMA Marketing Executive Diner op 9 april jl. heeft NIMA Byron Sharp, schrijver van het boek How Brands Grow en professor of Marketing Science aan de University of South Australia, mogen verwelkomen voor een presentatie over zijn nieuwe, verfrissende benadering van marketing. In dit boek bespreekt Sharp een meer ‘evidence based’ aanpak van marketing. Door de jaren heen hebben marketeers op basis van ervaring en onderbuikgevoel het vak bedreven, zonder al te veel aandacht te besteden aan wetenschappelijk onderzoek. Nu we steeds meer kunnen meten en data gedreven zijn, is het de hoogste tijd om deze aannames te toetsen. In deze presentatie stippen we kort 10 lessen uit het boek How Brands Grow aan die je zeker niet mag vergeten.
"Thinking, Fast and Slow" Applications
This document summarizes key points from Daniel Kahneman's book "Thinking, Fast and Slow". It discusses the two systems of thought - system 1 thinks fast and automatically using mental shortcuts while system 2 thinks slowly and deliberately. It describes cognitive biases like anchoring, overconfidence and regression to the mean that can cause irrational and incorrect judgments. It suggests applying this knowledge can help with design, workplaces and everyday life by recognizing biases and avoiding incorrect intuitions.
DPIA template
This document provides a template for conducting a Data Protection Impact Assessment (DPIA) pursuant to Article 35 of the GDPR. The template includes sections for describing the processing project, assessing the need for a DPIA, detailing the nature and purposes of the processing, evaluating the legality of the processing based on the legal framework, analyzing inherent risks to data subjects, implementing data protection by design principles, assessing residual risks, and involving the data protection authority as needed.
Gegevensbescherming-clausule in (overheids)opdracht
Voorbeeld van een Nederlandstalige clausule die in een overheidsopdracht of Request for Proposal (RFP) kan worden ingesloten om alle verschillende mogelijke samenwerkingsvormen (joint controller, controller-to-controller of controller-to-processor) af te dekken of dat althans te pogen.
20190131 - Presentation Q&A on legislation's influence (on travel management)
Presentation given at the event organised by ACTE and BATM on 31 January 2019 addressing a few questions on the payments legislation that are relevant for travel and expense manager.
GDPR toegepast op huur-verhuur (Dutch)
Deze presentatie gaat in op de toepassing van de gegevensbeschermingswetgeving op verhuuractiviteiten.
Controller-to-processor agreements
A presentation given at the legal hackers meetup of 19 June 2018 on common issues with controller-to-processor agreements aka "data processor agreement" (DPA). We revisit the distinction controller v processor. We then look at the directly applicable duties for processors, which do not need to be inserted in a contract. Finally we look at the different mandatory and "forgotten" components of the agreement.
Gegevensbescherming makelaars
De slides van een presentatie voor makelaars in de verzekeringssector. Gepresenteerd op 12 juni 2018 voor de Kempische Verzekeringskring (https://www.kempischeverzekeringskring.be/activiteit/gdpr-wat-u-als-makelaar-nog-niet-wist/).
EEAS - Cultivate your data protection
This document discusses data protection in layers, including physical security of devices, using encryption and passwords, being wary of public WiFi networks, installing trusted applications only, enabling automatic updates, using two-factor authentication when possible, regularly changing passwords, having backups, and being aware of social engineering risks in public spaces. The key messages are to stay curious about data protection, think long-term about security, and accept that incidents may occur while reporting them to mitigate consequences.
Presentation for the LSEC GDPR event - 20171130
Presentation given on the experience of privacy design labs on the LSEC Belgium GDPR event of 30 November 2017.
Event page: https://www.leadersinsecurity.org/events-old/icalrepeat.detail/2017/11/30/186/-/gdpr-plan-to-be-ready-prepare-to-set-change-to-go-session-3-privacy-impact-assessment-scenario-planning-data-loss-management.html?filter_reset=1
Privacy Design lab page: https://sites.google.com/site/pbd20171106
Example of a privacy design jam by Facebook (Berlin 2017) : https://www.facebook.com/facebookbrussels/videos/1419793831400471/
Training privacy by design
A first draft of a training on privacy by design both as an international concept (stemming from Canada) and as a GDPR related concept (article 25).
GDPR voor steden en gemeenten (Dutch)
Hoe breng je de nieuwigheden van de Algemene Gegevensbeschermingsverordening (AGV) of General Data Protection Regulation (GDPR) aan bij jouw stad of gemeente? Dit is een voorbeeld van slidedeck.
GDPR project board deck (example)
This is an example of a deck for the decision makers (generally the board of directors) to first explain that data protection is a (reputational, legal, operational) risk that - like any other business risk needs to be managed. Then it allows for some explanation of the status of data protection (law) and the main novelties under the GDPR. It then highlights the main changes required in project mode and (later on, after the handover) in business-as-usual mode.
Extra reference to the Vlerick reference (because published after the publication of this slide deck): http://www.vlerick.com/en/programmes/management-programmes/digital-transformation/digital-transformation-insights/insight-1)
IS/DPP for staff #8 - Monitoring
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on an aspect that overarches all previous ones: monitoring. It touches on both perspectives of staff involvement:
- staff works with the data, processes it, etc. and thus is the agent of the company
- the company, to show accountability, should set up a balanced way of controlling the staff, which per se involves processing personal data of the staff members
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #7 - Incidents
This document discusses incident response procedures for an organization. It outlines the roles of the Information Security Officer (ISO) and Data Protection Officer (DPO) in responding to incidents. It also mentions having emergency and business continuity procedures in place to handle high impact incidents. The document stresses the importance of identifying, notifying, and escalating incidents to the appropriate teams like the helpdesk, ISO, or DPO.
IS/DPP for staff #6 - Acceptable use
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on the acceptable use of the companies (and sometimes also own) means. Each company should add what is appropriate for it.
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #5b - Passwords
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
The part focusses on authentication, and more particularly on passwords.
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #5a - Access
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on authorization and access rights, focussing on the staff's part in that.
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #3b - Data Classification
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on data classification, drilling a bit deeper into confidentiality, integrity, availability (=CIA), privacy (=CAPI), traceability, and retention (=PATRIC), to be amended to meet the specific organisation's setup.
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #3a - Data
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on the concept of data, reasons for protecting data, personal data and data processing.
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #2 - Why?
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on the reason why we should live up to the rules of IS/DPP, from a "negative" perspective (what do we want to avoid?) and from a "positive" perspective (what do we want to accomplish?).
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #1 - intro
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This is an introduction explaining
- the difference between information security, data protection and privacy,
- the need and usefulness for staff engagement
The slides come with notes that in short explain the visuals on the slides.
Training Procurement
This is an example training in the context of IS/DPP, information security, data protection and privacy.
It is a training directed to procurement officers and outsourcing managers.
The generic idea is that procurement officers and outsourcing managers support the inventory and overview of the company or group on third party relationships. By a well implemented governance through procurement officers and outsourcing managers it should be easier to upkeep the overview through the existing processes of managing (most) third party relationships, thus increasing ownership and awareness of information security and privacy.
Training Information Asset Owners
This is an example training in the context of IS/DPP, information security, data protection and privacy.
It is a training directed to IAOs, information assets owners.
The generic idea is that IAOs support the inventory and overview of the company or group on information assets (which can, but don't per se have to include personal data). By a well implemented governance through IAOs it should be easier to upkeep the overview close to the actual users, thus increasing ownership and awareness of information security and privacy.
Example general terms and conditions PenTest (NL)
Just an example of how general terms and conditions for a pentest (in Dutch) could look. This is not advice to use this, just for reflection purposes only: any comments are welcome. Also, it is to be used with specific terms and conditions which in more detail should describe the assignment.
Beleid informatiebeveiligingsincidenten stad
High level oorbeeld van een incidentenbeheersingsbeleid voor een stad.
ISMS IS/DPP TOP POLICY - example (governance)
An example of an information security / data protection & privacy overarching policy, in which you define the principle, the main pillars in the governance (bodies, persons and "policies").
More Related Content
More from Tommy Vandepitte
Gegevensbescherming makelaars
De slides van een presentatie voor makelaars in de verzekeringssector. Gepresenteerd op 12 juni 2018 voor de Kempische Verzekeringskring (https://www.kempischeverzekeringskring.be/activiteit/gdpr-wat-u-als-makelaar-nog-niet-wist/).
EEAS - Cultivate your data protection
This document discusses data protection in layers, including physical security of devices, using encryption and passwords, being wary of public WiFi networks, installing trusted applications only, enabling automatic updates, using two-factor authentication when possible, regularly changing passwords, having backups, and being aware of social engineering risks in public spaces. The key messages are to stay curious about data protection, think long-term about security, and accept that incidents may occur while reporting them to mitigate consequences.
Presentation for the LSEC GDPR event - 20171130
Presentation given on the experience of privacy design labs on the LSEC Belgium GDPR event of 30 November 2017.
Event page: https://www.leadersinsecurity.org/events-old/icalrepeat.detail/2017/11/30/186/-/gdpr-plan-to-be-ready-prepare-to-set-change-to-go-session-3-privacy-impact-assessment-scenario-planning-data-loss-management.html?filter_reset=1
Privacy Design lab page: https://sites.google.com/site/pbd20171106
Example of a privacy design jam by Facebook (Berlin 2017) : https://www.facebook.com/facebookbrussels/videos/1419793831400471/
Training privacy by design
A first draft of a training on privacy by design both as an international concept (stemming from Canada) and as a GDPR related concept (article 25).
GDPR voor steden en gemeenten (Dutch)
Hoe breng je de nieuwigheden van de Algemene Gegevensbeschermingsverordening (AGV) of General Data Protection Regulation (GDPR) aan bij jouw stad of gemeente? Dit is een voorbeeld van slidedeck.
GDPR project board deck (example)
This is an example of a deck for the decision makers (generally the board of directors) to first explain that data protection is a (reputational, legal, operational) risk that - like any other business risk needs to be managed. Then it allows for some explanation of the status of data protection (law) and the main novelties under the GDPR. It then highlights the main changes required in project mode and (later on, after the handover) in business-as-usual mode.
Extra reference to the Vlerick reference (because published after the publication of this slide deck): http://www.vlerick.com/en/programmes/management-programmes/digital-transformation/digital-transformation-insights/insight-1)
IS/DPP for staff #8 - Monitoring
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on an aspect that overarches all previous ones: monitoring. It touches on both perspectives of staff involvement:
- staff works with the data, processes it, etc. and thus is the agent of the company
- the company, to show accountability, should set up a balanced way of controlling the staff, which per se involves processing personal data of the staff members
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #7 - Incidents
This document discusses incident response procedures for an organization. It outlines the roles of the Information Security Officer (ISO) and Data Protection Officer (DPO) in responding to incidents. It also mentions having emergency and business continuity procedures in place to handle high impact incidents. The document stresses the importance of identifying, notifying, and escalating incidents to the appropriate teams like the helpdesk, ISO, or DPO.
IS/DPP for staff #6 - Acceptable use
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on the acceptable use of the companies (and sometimes also own) means. Each company should add what is appropriate for it.
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #5b - Passwords
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
The part focusses on authentication, and more particularly on passwords.
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #5a - Access
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on authorization and access rights, focussing on the staff's part in that.
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #3b - Data Classification
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on data classification, drilling a bit deeper into confidentiality, integrity, availability (=CIA), privacy (=CAPI), traceability, and retention (=PATRIC), to be amended to meet the specific organisation's setup.
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #3a - Data
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on the concept of data, reasons for protecting data, personal data and data processing.
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #2 - Why?
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This part is on the reason why we should live up to the rules of IS/DPP, from a "negative" perspective (what do we want to avoid?) and from a "positive" perspective (what do we want to accomplish?).
The slides come with notes that in short explain the visuals on the slides.
IS/DPP for staff #1 - intro
An example of how the staff training on information security, data protection and privacy (IS/DPP) could look.
This is an introduction explaining
- the difference between information security, data protection and privacy,
- the need and usefulness for staff engagement
The slides come with notes that in short explain the visuals on the slides.
Training Procurement
This is an example training in the context of IS/DPP, information security, data protection and privacy.
It is a training directed to procurement officers and outsourcing managers.
The generic idea is that procurement officers and outsourcing managers support the inventory and overview of the company or group on third party relationships. By a well implemented governance through procurement officers and outsourcing managers it should be easier to upkeep the overview through the existing processes of managing (most) third party relationships, thus increasing ownership and awareness of information security and privacy.
Training Information Asset Owners
This is an example training in the context of IS/DPP, information security, data protection and privacy.
It is a training directed to IAOs, information assets owners.
The generic idea is that IAOs support the inventory and overview of the company or group on information assets (which can, but don't per se have to include personal data). By a well implemented governance through IAOs it should be easier to upkeep the overview close to the actual users, thus increasing ownership and awareness of information security and privacy.
Example general terms and conditions PenTest (NL)
Just an example of how general terms and conditions for a pentest (in Dutch) could look. This is not advice to use this, just for reflection purposes only: any comments are welcome. Also, it is to be used with specific terms and conditions which in more detail should describe the assignment.
Beleid informatiebeveiligingsincidenten stad
High level oorbeeld van een incidentenbeheersingsbeleid voor een stad.
ISMS IS/DPP TOP POLICY - example (governance)
An example of an information security / data protection & privacy overarching policy, in which you define the principle, the main pillars in the governance (bodies, persons and "policies").
More from Tommy Vandepitte (20)
Kahneman (part 1)
- 3. WAAROM? KAHNEMAN IS DE POTGROND
- 5. REKENEN 1 + 1 = 7 x 7 = √16 = 7 x 19 =
- 6. BASEBALL Een baseball-bat en een –bal kosten samen 1,10 EUR. De bat kost een euro meer dan de bal. Hoeveel kost de bal?
- 7. FLIP 99 keer geflipt en 99 keer kop. Wat is de kans dat bij de volgende flip het kop dan wel munt is?
- 8. SPEEL JE? winst + 100winst + 150winst + 250 verlies – 100
- 9. TO SETTLE OR NOT TO SETTLE? 95% kans op 100 als de jury buiten komt 80 nu, zeker
- 10. ULTIMATUM GAME Je krijgt een zak geld van 100. Je moet die verdelen onder jullie twee binnen 20 sec. Als het lukt, krijgt ieder wat overeen- gekomen is.
- 12. SYSTEEM 1: DRAAIT IN DE ACHTERGROND
- 13. SYSTEEM 2: WORDT OPGEROEPEN
- 14. SYSTEEM 1: MONITORT VOORTDUREND
- 15. SYSTEEM 2: KOMT BOVEN WATER BIJ TROUBLE
- 16. SYSTEEM 1: SNEL
- 17. SYSTEEM 2: TRAAG
- 18. SYSTEEM 1: EMOTIONEEL / ASSOCIATIEF
- 22. SYSTEEM 1: EINDELOZE CAPACITEIT
- 23. SYSTEEM 2: BEPERKTE CAPACITEIT Eén ding met e’ keer.
- 25. SYSTEEM 2: VRAAGT ENERGIE
- 26. SYSTEEM 2 CONTROLEERT SYSTEEM 1
- 27. SYSTEEM 1 Bewust van het resultaat Onbewust van het proces,
- 29. SYSTEEM 1: HERKENNING / ERVARING
- 30. SYSTEEM 2: TO BOLDLY GO…
- 31. LEREN = ERVARING OPDOEN van systeem 2… naar systeem
Editor's Notes
- De systemen op zich bestaan niet (humunculi), maar ze zijn een manier om het verhaal te brengen.