In information security, sometimes the difference between employed and criminal is a fine line. This talk will discuss how the law affects and guides our profession. Contracts, regulatory law (HIPAA, GLBA) and criminal law (Computer Fraud and Abuse Act) all affect the practice and business of information security. In this talk, we will explain how practitioners can keep themselves and their organizations on the right side of the law.

Alex is both an information security practitioner and a licensed attorney. He is a Senior Security Advisor at Leviathan Security, a Seattle based security consulting firm.

Recorded at BSides Philly 2016