Panel Title: Data Breach Preparedness and Response: Mitigating Risks and Restoring Trust in Financial Institutions
Introduction/Session Overview:
In today’s interconnected digital landscape, data breaches have become a pervasive threat, particularly in financial institutions where sensitive customer information is at stake. The 6th Privacy Symposium Africa recognizes the critical need to address this issue head-on, considering the escalating frequency and sophistication of cyberattacks targeting financial systems. This panel seeks to delve into strategies for data breach preparedness and response, emphasizing the importance of mitigating risks and restoring trust in financial institutions.
Importance of the Panel:
With the exponential growth of digital transactions and the increasing reliance on technology in financial services, the potential consequences of data breaches in this sector are immense. Beyond financial losses, breaches erode consumer confidence, damage reputations, and can lead to regulatory penalties. In light of recent high-profile breaches, the urgency to strengthen defenses and enhance response mechanisms in financial institutions has never been greater. This panel aims to provide insights, best practices, and practical solutions to safeguard sensitive data, bolster cybersecurity frameworks, and rebuild trust in the wake of a breach.
Outcomes
Identify common vulnerabilities and threats faced by financial institutions regarding data breaches
Discuss best practices and strategies for data breach preparedness, detection, and response.
Highlight the importance of collaboration between financial institutions, regulators, and cybersecurity experts in combating data breaches.
Provide actionable insights and recommendations for strengthening cybersecurity frameworks and restoring trust post-breach.
Foster knowledge exchange and networking among stakeholders to collectively address the challenges posed by data breaches in the financial sector.
Session Format
- A) Introduction by the moderator (5 minutes)
- B) Panelist presentations on key challenges and opportunities (10 minutes each)
- C) Moderated discussion among panelists (15 minutes)
- D) Q&A session with the audience (15 minutes)
- E) Closing remarks by the moderator (5 minutes)
Speakers
Livhuwani Maswielelo
Regional Privacy Officer | PayU Africa
Livhuwani Maswielelo
Regional Privacy Officer | PayU Africa
Panel: Data Breach Preparedness and Response: Mitigating Risks and Restoring Trust in Financial Institutions
Date: Wednesday 20th November, 2024
Time: 10:30 am – 11:30 am CAT
Livhuwani Maswielelo is an accomplished professional with extensive experience in the legal profession and a strong background in data protection, information technology, banking, telecommunications, and insurance. As the Regional Privacy Officer for PayU Africa, Livhuwani plays a pivotal role in ensuring privacy and compliance in Kenya, Nigeria, South Africa, and other African markets. Her previous experience further demonstrates her expertise in supporting privacy programs in Africa.
Livhuwani’s dedication to her field is evident through her membership with the International Association of Privacy Professionals, showcasing her commitment to staying current in the ever-evolving landscape of data protection. With over 7 years of experience, Livhuwani is undoubtedly making significant contributions to the global payments and innovative fintech industry and is poised to become an influential leader in the field.
Rosemary Koech-Kimwatu
Head of Data Protection | KCB Group
Rosemary Koech-Kimwatu
Head of Data Protection | KCB Group
Panel:Data Breach Preparedness and Response: Mitigating Risks and Restoring Trust in Financial Institutions
Date: Wednesday 20th November, 2024
Time: 10:30 am – 11:30 am CAT
Rosemary serves as Head of Data Protection at KCB Group, working to guide the group’s compliance with data protection laws. She is the Chair of the Kenya Banker’s Association Data Protection Working Group and is the Vice Chair of the Data Privacy and Governance Society Kenya and a founding member of the Kenya Privacy Professionals Association. She is legal professional whose practice focuses on technology, public policy and regulatory affairs.
Rosemary has over 13 years of experience serving in data protection, policy and legal functions in leading corporations. Rosemary is a recipient of a number of regional industry awards for her contributions to tech law and policy. She is a member of the Law Society of Kenya and serves as a board member at the Legal Hackers Global, Kenya Network Information Center (KeNIC), the Association of Fintechs in Kenya (AFIK) and is a trustee at the Kenya ICT Action Network (KICTANet) which is a tech policy think tank.
Mutsa Mabhande
Group Head of Information Systems Security, Governance, and Compliance | CBZ Holdings
Mutsa Mabhande
Group Head of Information Systems Security, Governance, and Compliance | CBZ Holdings
Panel:Data Breach Preparedness and Response: Mitigating Risks and Restoring Trust in Financial Institutions
Date: Thursday 21st November, 2024
Time: 10:30 am – 11:30 am CAT
Mutsa Mabhande is a distinguished senior Cybersecurity and IT Governance professional with extensive experience in IT systems within the financial sector.
She holds a bachelor’s degree in informatics and a master’s degree in computer science, along with numerous certifications including CISA, CRISC, PMP, CDPO, ISO27001, and ISO22301.
Her tenure at KPMG Zimbabwe endowed her with a robust Big 4 IT advisory background, where she led cybersecurity and IT governance implementations, ensuring comprehensive security controls across various customer touchpoints in the financial sector.
Currently, Mutsa serves as the Group Head of Information Systems Security, Governance, and Compliance for CBZ Holdings. Her expertise spans both local and international domains, encompassing the implementation and maintenance of security systems, IT security protocols, IS risk management, and incident response.
Previously, she held a similar position at Ecocash Holdings, where she led the ISO27001 certification for the group and was instrumental in implementing various security controls at the group level.
She is a certified ISO27001 Information Security Management System Lead Implementer and a certified Business Continuity Management System Lead Implementer. Mutsa leads a high-performing team of skilled security engineers dedicated to safeguarding systems that process customer data.
She has also pioneered internal initiatives aimed at encouraging girls to pursue careers in ICT, successfully increasing the number of females in her teams.
Lori Baker
Member of the Editorial Board of the Journal of Data Protection and Privacy
Lori Baker
Member of the Editorial Board of the Journal of Data Protection and Privacy
Panel:Data Breach Preparedness and Response: Mitigating Risks and Restoring Trust in Financial Institutions
Date: Wednesday 20th November, 2024
Time: 10:30 am – 11:30 am CAT
Lori Baker, FIP, Member of the Editorial Board of the Journal of Data Protection and Privacy
Lori is an experienced attorney with expertise in data protection and regulatory compliance, as well as broad practice in commercial contracting.
She is qualified in both the USA (in the states of New Jersey and Pennsylvania) and the UK, and is a Fellow of Information Privacy as certified by the International Association of Privacy Professionals.
Lori now provides data protection and regulatory compliance (AML, economic substance and common reporting standard) strategy and support for DIFC Authority, while in her own time she writes and speaks on various data protection and compliance topics.
Prior to relocating to Dubai in 2016, Lori was based in London, UK for 10 years. She worked for Fieldfisher LLP in the technology and outsourcing team as a senior privacy and cybersecurity associate.
She also held in-house roles as Senior Compliance and Privacy Counsel at Dun & Bradstreet, Head of Ethics and Compliance at Orange Business Services and Global Regulatory/Privacy Specialist at BT Global Services.
Charles Otiang`a Owiti
Advocate, High Court of Kenya | Patent Agent & ICT, Data Expert
Charles Otiang`a Owiti
Advocate, High Court of Kenya | Patent Agent & ICT, Data Expert
Panel:Data Breach Preparedness and Response: Mitigating Risks and Restoring Trust in Financial Institutions
Date: Thursday 21st November, 2024
Time: 10:30 am – 11:30 am CAT
With an impressive 21-year career, Charles is a seasoned advocate known for his multifaceted experience spanning international shipping, logistics, and diverse legal sectors across Kenya, Rwanda, Burundi, and Tanzania.
Charles’s journey in the international shipping and logistics industry has seen him in a range of roles, from commercial leadership to operational excellence, across multiple multinational organizations.
Charles successfully served as in-house counsel, delivering legal expertise and strategic guidance within these organizations, contributing to their legal resilience and strategic growth.
Charles is a member of the LSK ICT/IP Committee and the LSK Tax Committee. His contributions to the legal community include thought-provoking articles in various domains, including AI, digital and creative industries, tax law, maritime law, and ICT. His works have been featured in esteemed publications such as KRA/KESRA’s Tax Prism magazine, the Commonwealth Lawyers Association, and the LSK Newsletter.
Committee Engagements: Charles’ dedication extends to key legal committees, where he plays an active role. These include membership in the East Africa Law Society’s Maritime & Aviation Committee and the Trade and Regional Integration Committee.
Kelvin Sabao
Advocate | Titan Law, Zimbabwe
Kelvin Sabao
Advocate | Titan Law, Zimbabwe
Panel: Data Breach Preparedness and Response: Mitigating Risks and Restoring Trust in Financial Institutions
Date: Wednesday 20th November, 2024
Time: 10:30 am - 11:30 am CAT
Kelvin Sabao is a distinguished Legal Practitioner practising law at Titan Law, known for his expertise in providing exceptional legal solutions. His extensive knowledge spans various legal fields, making him a versatile legal professional capable of managing a broad spectrum of cases. His primary areas of practice include Corporate Law, Investment Law, Immigration Law, Data and Cyber Security Law, and Corporate Governance, among others.
Kelvin holds both an LLB and an LLM in Corporate Law from the University of South Africa, equipping him with the skills to navigate the complexities of the legal landscape. His academic background enables him to offer comprehensive, tailored legal solutions to clients facing diverse legal challenges.
As a thought leader in his field, Kelvin has significantly contributed to legal literature in Zimbabwe. He is a co-author of "The Directors' Handbook in Zimbabwe," offering valuable insights into the business and legal landscapes. Additionally, he is a regular columnist for the Business Times Newspaper, where he shares his expertise on various legal matters.
Kelvin's excellence in the legal profession has been recognized with the prestigious Top 40 Under 40 Young Business Leaders in Zimbabwe Award for 2023 and 2024, conferred by the Institute of Corporate Directors Zimbabwe.
Gilbert Ouko
Director of Anti-Financial Crime & Compliance at Diligence Advisory Africa
Gilbert Ouko
Director of Anti-Financial Crime & Compliance at Diligence Advisory Africa
Panel: Data Breach Preparedness and Response: Mitigating Risks and Restoring Trust in Financial Institutions
Role: Moderator
Date: Wednesday 20th November, 2024
Time: 10:30 am - 11:30 am (CAT)
Gilbert Ouko is the Director of Anti-Financial Crime & Compliance at Diligence Advisory Africa, with extensive experience in AML, fraud, sanctions, and financial crime risk management.
He worked at Standard Chartered Bank Kenya, Direct Pay, and Refinitiv/Thomson Reuters and has trained hundreds of employees in AML, financial crime control, and data privacy.
Gilbert is proficient in various systems, including ERM systems, and holds certifications in Regulatory Compliance, Cryptocurrency Compliance, and IT Audit.
He aims to make the financial system transparent and prevent financial crime.