Privacy, Triage, and Risk

Triage is often overlooked in threat management. But without understanding the significance of risks, making intelligent tradeoffs, and conveying those in a way which builds consensus among all stakeholders, even the best ideas will not happen. Privacy triage is notoriously hard: the threat models are extremely diverse, spanning both rare, catastrophic risks and dispersed continuous damage (the two things people are worst at understanding), and key stakeholders have frequently not internalized what failures can look like for real people. This talk will present a collection of tools which have proven useful for both making triage decisions and for getting difficult stakeholders on board.