Heidi Wachs, Esq., Cipp-Us Email & Phone Number

Washington, Dc, Us

Washington, Dc, Us

Washington, District Of Columbia, United States

Washington D.C. Metro Area

Heidi L. Wachs is a Managing Director in the Washington, D.C. office of Stroz Friedberg, an Aon Company, where she helps clients prepare for and respond to data breach and cybersecurity incidents and develop and implement data privacy and information security programs. Ms. Wachs also oversees complex investigations involving the collection, use, and sharing of data and personal information, in particular through the use of APIs, scraping, hacking, cookies and other third-party web page… Show more Heidi L. Wachs is a Managing Director in the Washington, D.C. office of Stroz Friedberg, an Aon Company, where she helps clients prepare for and respond to data breach and cybersecurity incidents and develop and implement data privacy and information security programs. Ms. Wachs also oversees complex investigations involving the collection, use, and sharing of data and personal information, in particular through the use of APIs, scraping, hacking, cookies and other third-party web page integrations. - Lead numerous incident responses to business e-mail compromises, wire transfer fraud, malware infections, and large scale data breaches involving personal information. - Advise clients and work closely with outside counsel through the entire matter lifecycle by quickly assembling digital forensics and incident response teams, supervising the deployment of proprietary incident response technologies, briefing C-suite executives and legal counsel, and coordinating additional Stroz Friedberg resources as appropriate, such as the e-discovery division to help scan impacted data sets for personal information. - Guide companies in developing and implementing information governance and information security policies, programs, and procedures. - Manage large-scale complex technical and privacy investigations to assist companies and organizations in understanding and reviewing the use of data they collect and maintain, including retroactive reviews that enable companies to identify historical and ongoing abuse of authorized and private APIs resulting in excessive collection, unauthorized sharing, or misuse of data by third-parties, as well as unauthorized scraping of data. Show less

Washington D.C. Metro Area

Heidi L. Wachs was a member of the firm's Data Privacy and Cybersecurity Practice. A nationally recognized leader in privacy, breach response and data security compliance, her wealth of experience includes serving as a privacy researcher and as chief privacy officer of a major university. Clients sought her counsel in data breach handling and recovery, information classification, information security and identity governance and administration. Ms. Wachs is a certified information privacy… Show more Heidi L. Wachs was a member of the firm's Data Privacy and Cybersecurity Practice. A nationally recognized leader in privacy, breach response and data security compliance, her wealth of experience includes serving as a privacy researcher and as chief privacy officer of a major university. Clients sought her counsel in data breach handling and recovery, information classification, information security and identity governance and administration. Ms. Wachs is a certified information privacy professional. Show less

Washington D.C. Metro Area

> Author extensively researched technical publications focusing on issues of data privacy and information protection for global client base primarily comprised of IT professionals with privacy and identity and access management (IAM) responsibilities located in 85 countries. Publications include: - Implement Information Classification to Enhance Data Governance and Protection, Oct. 23, 2014.- Information Classification: An Essential Security Thing You're (Still) Not Doing, Aug. 20… Show more > Author extensively researched technical publications focusing on issues of data privacy and information protection for global client base primarily comprised of IT professionals with privacy and identity and access management (IAM) responsibilities located in 85 countries. Publications include: - Implement Information Classification to Enhance Data Governance and Protection, Oct. 23, 2014.- Information Classification: An Essential Security Thing You're (Still) Not Doing, Aug. 20, 2014.- Improving Data Governance With Effective Data Discovery, Jul. 14, 2014. - How to Succeed with Role Management and Avoid Common Pitfalls, May 19, 2014. - Making Privacy Practical for Technical Professionals, Mar. 31, 2014.- Keep Auditors and Risk Managers Happy with Access Certification, coauthor, Feb. 10, 2014.- Building an Entitlement Catalog to Succeed with Identity Governance and Administration, coauthor, Jan. 17, 2014.- Are mobile devices revealing too much? Balancing privacy and information protection in COPE and BYOD mobility programs, coauthor, Oct. 29, 2013. - Managing Privacy Risks in the Public Cloud, May 7, 2013.> Present sessions and workshops at Gartner Events attended by thousands of IT professionals on privacy as applied to technical projects involving private cloud adoption and mobility. Presentations include: - Fundamentals of User Provisioning and Identity and Access Governance- Saving Privacy in the Public Cloud- How to COPE with Two Sides of BYOD: Bring Your Own Device and Bring Your Own (Personal) Data- Implementing a Social Security Number Remediation Plan, workshop.- Geolocation, Access Control, and Privacy: the Spy in Your Pocket.> Advise Gartner for Technical Professionals clients on incorporating privacy and information protection into IAM implementations. Partner with clients, serve as a sounding board, and provide how-to advice through all phases of IT projects including planning, strategy, policy development, and implementation. Show less

> Managed University-wide data privacy initiatives for information technology operations supporting 1,300+ faculty, 15,000+ students, and 1,500+ staff, including all efforts of the University’s Data Security Task Force created in response to 2008 data breach of 38,000 Social Security Numbers.> Coordinated with Office of University Counsel and Office of Compliance and Ethics to ensure all University Information Services operations and practices were compliant with relevant laws… Show more > Managed University-wide data privacy initiatives for information technology operations supporting 1,300+ faculty, 15,000+ students, and 1,500+ staff, including all efforts of the University’s Data Security Task Force created in response to 2008 data breach of 38,000 Social Security Numbers.> Coordinated with Office of University Counsel and Office of Compliance and Ethics to ensure all University Information Services operations and practices were compliant with relevant laws, regulations, and industry best practices including state data privacy laws, HIPAA, and PCI.> Implemented and enforced all information technology policies.> Served as Digital Millennium Copyright Act agent of record with the United States Copyright Office for the Georgetown University network and represented University in all peer-to-peer file sharing-related matters. Show less

> Communicated with congressional and federal agency members and staff to advocate on behalf of members on a diverse range of legal and policy issues including patent reform, copyright, and e-discovery.> Acted as a policy resource to over 2,000 member institutions through individual communications, presentations at conferences, and content authored for the EDUCAUSE website and publications.

> Represented organization in all aspects relating to Orphan Works and the proposed WIPO Broadcast Treaty with other public interest groups, performers’ rights organization executives, and the United States Copyright Office.> Aided development of testimony by organization president before House and Senate Committee Hearings.

> Supervised day-to-day account team and collaborated with editors to place articles in leading trade publications for public relations firm with technology industry clients including a variety of IBM business and technology divisions.

Jd, Intellectual Property

Ba, Journalism, Jewish Studies