article thumbnail

Security Compliance & Data Privacy Regulations

eSecurity Planet

Other industry standards too can have the force of “pseudo-law” – notably, the NIST Cybersecurity Framework, which federal regulators often apply to financial-services firms and government contractors. Thus, it can be difficult for even small enterprises to keep up with information security and data privacy compliance.

article thumbnail

FTC Seeks Comment on Proposed Changes to GLBA Implementing Rules

HL Chronicle of Data Protection

The Safeguards Rule, which originally went into effect in 2003, is process-oriented. It includes general, high level elements of a security program, but lacks detailed security steps. The proposed amendments follow the FTC’s receipt of public comments in 2016 regarding the Safeguards Rule as part of the FTC’s regular review cycle.

Privacy 40
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

UNRAVELING EternalBlue: inside the WannaCry’s enabler

Security Affairs

In some instances, the attacker might choose to deploy ransomware across the network, encrypting important files and bringing operations to a halt. They then demand a ransom in exchange for the decryption keys, causing financial losses and potential reputational damage to the organization. Does EternalBlue still exist?

Phishing 110
article thumbnail

Best Digital Forensics Tools & Software for 2021

eSecurity Planet

With their Digital Intelligence Investigative Platform, Cellebrite boasts services that unify the investigative lifecycle and preserve digital evidence. Be it advanced locks, encryption barriers, or deleted and unknown content, the UFED (Universal Forensic Extraction Device) can extract physical and logical data.

article thumbnail

FTC Proposes Changes to GLB Privacy and Safeguards Rules

Hunton Privacy

The proposed changes would add more detailed requirements on how financial institutions must protect customer information. Notably, the proposed amendments would require covered financial institutions to encrypt all customer data held or transmitted by the institution both in transit over external networks and at rest.

Privacy 55
article thumbnail

Best Network Security Tools 2021

eSecurity Planet

Larger organizations most targeted by advanced persistent threats (APTs) like enterprises and government agencies, financial services, energy, and telecommunications make up Kaspersky EDR’s clientele. Since 2003, Splunk’s machine data analysis capabilities have made the firm an industry staple.