Tuesday, November 10, 2026
Hybrid Meeting (In-Person at Redmond, WA and Online)
Social / Networking: 5:30 - 6:00 pm with food and refreshments
Presentation: 6:00 - 7:00 pm
November meeting features - Malu Septien Milan, Sr. Manager Accenture Security, who will discuss How to Tackle a Complex Cyber-Data-AI Regulatory Landscape as a Data Management/Fabric Practitioner
Abstract:
Cybercrime and the acceleration of regulation, together with the complexity both create, are increasingly difficult to tackle as organizations adopt new technologies in the workplace. This session gives data management and data fabric practitioners a practical way to navigate that landscape, connecting a fast moving set of global regulations to the real decisions teams make when they build and operate modern data platforms.
Malu will map the global regulatory landscape and show who mandates what, then translate those obligations into concrete regulatory touchpoints on a data platform such as Databricks. She will walk through cybersecurity best practices as a unified set of controls across identity, network, compute, and storage, and share an audit ready control checklist that aligns CCPA, HITRUST r2, and NIST CSF 2.0 so practitioners can validate the maturity of their own environment with clear evidence.
Attendees will leave able to see where regulation meets architecture, how to apply controls that satisfy multiple frameworks at once, and how to confirm that their data environment is ready to pass scrutiny.
What You Will Learn:
1. Global Regulatory Landscape: GDPR, EU CRA, NIS2, CCPA, PIPEDA, PDPA, and APRA CPS 234, and who mandates what.
2. How Regulations Apply to Data Platforms: Databricks as a processing environment, with its regulatory touchpoints and obligations.
3. Databricks Cybersecurity Best Practices: 19 controls from the unified framework spanning identity, network, compute, and storage.
4. An 18 control checklist aligned across CCPA, HITRUST r2, and NIST CSF 2.0, giving an audit ready view across three frameworks.
5. Cybersecurity Maturity Validation: the key takeaways and evidence requirements that confirm your environment passes.
Speaker Bio:
Malu Septien Milan is a Senior Manager with Accenture Security and a performance driven CTO, CISO, DPO, cyber strategy, and compliance executive. She holds information security and AI architecture certifications and brings deep expertise across cyber, AI, and privacy. She has led complex strategy, governance, and operational engagements for global organizations and consulting firms across 109 countries.
As Accenture’s global cyber strategy, regulatory, and risk management offering leader, she has delivered global AI assets and tools that integrate standards, compliance, and AI strategy in a simplified way. She runs CISO strategy workshops, assessments, roadmap development, remediation, and compliance readiness programs for complex cases at scale. Her work spans frameworks and regulations including NIST CSF 2.0, ISO 27001 and 27701, GDPR, CCPA and CPRA, the EU AI Act, NIS2, DORA, CRA, HIPAA, SOX, PCI, FedRAMP, and CMMC.
Previously
Malu is a voice of ISACA to the NIST CSF and Privacy Framework, a member of the U.S. Cybersecurity National Center of Excellence, an IEEE and IAPP working group member, and an instructor for Carnegie Mellon University’s M.S. Privacy Engineering program. Prior to Accenture, as GM at Microsoft, she led privacy programs for large firms and led Quality Business Excellence and the Quality Academy. Her credentials include a B.S. in Computer Science, a B.P.S. in Telecommunications Management, an MBA from Wharton, MIT CISR, and the Stanford Innovation Bootcamp, along with Certified Anthropic AI Architect and Lean Six Sigma Master Black Belt.
See LinkedIn Profile: Malu Septien Milan
Register Now: DAMA Puget Sound - November Chapter Meeting
In-Person: Quadrant Resources, 5020 148th Ave NE Ste 250, Redmond, WA 98052
Online Zoom Link: https://us02web.zoom.us/j/81552706490?pwd=Aa0TrWAU7sVULRfaBID6zhwm374zv2.1
