IT Governance

MAY 17, 2018

This week, we discuss the exposure of millions of Facebook users’ data, security failings in train passenger networks and Kaspersky Lab’s relocation to Switzerland. Hello and welcome to the IT Governance podcast for Friday, 18 May 2018. Here are this week’s stories.

Government 70

Government Access Information Security Security 70

Data Matters

JUNE 29, 2018

identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number or passport number. Businesses cannot discriminate against consumers who exercise any of their rights under AB 375.

GDPR 79

GDPR Privacy Sales Data breaches 79

Data Matters

JUNE 29, 2018

identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, internet protocol address, email address, account name, Social Security number, driver’s license number or passport number. Businesses cannot discriminate against consumers who exercise any of their rights under AB 375.

GDPR 60

GDPR Privacy Sales Data breaches 60

Hunton Privacy

OCTOBER 31, 2011

The Committee stated in its October 18, 2011 report that the current penalties for unlawfully obtaining personal data (under Section 55 of the DPA) are an inadequate deterrent, and urged the government to exercise its power to introduce prison sentences without delay.

Personal data 45

Personal data Insurance Data breaches Government 45

Data Matters

JUNE 11, 2020

Securities and Exchange Commission’s (the SEC) examination and enforcement programs. DO exercise great caution in relying on conclusions about the materiality of any potential MNPI. 8, 2011), [link]. 17, 2008), [link]. Longoria et al. , 11-cv-0753 (JSR) (S.D.N.Y. 27, 2012), [link]. 27, 2012), [link]. See 15 U.S.C. §

Risk 76

Risk Compliance Access IT 76

Hunton Privacy

NOVEMBER 4, 2010

Rights of the data subjects: improving the ways in which individuals can exercise their rights, for example, by introducing deadlines to respond to individuals’ requests and strengthening the “right to be forgotten” ( i.e. , the right for individuals to have their data deleted when they are no longer needed for legitimate purposes).

Personal data 40

Personal data Communications Privacy Data breaches 40

ForAllSecure

MARCH 1, 2022

SO I only mention Ross Ulbricht in talks because I use him as an example of an Operation Security, or OpSec failure. Operational Security is typically a military process. In 2011, there a was user in a chat room by the name of altoid, like the mint. Anyone talking about it in 2011 most likely had inside information.

Privacy 52

Privacy IT Passwords Encryption 52

Hunton Privacy

NOVEMBER 2, 2011

On November 2, 2011, following welcome comments by Federal Institute for Access to Information and Data Protection (“IFAI”) Commissioner Jacqueline Peschard, the 33rd International Conference of Data Protection and Privacy Commissioners opened in Mexico City with an examination of the phenomenon of “Big Data” as a definer of a new economic era.

Big data 40

Big data Privacy Marketing Data collection 40

Scary Beasts Security

MARCH 21, 2014

It was an interesting exercise, of course with an ulterior motive! After this year, Tavis Ormandy's famous Flash security rampage landed (80+ fixes), with follow-up patches such as 7 fixes here. I counted 18 and countless kind Twitterers pointed out some I may have missed. We have harm to corporations, aka. theft and economic damage.

IT 20

IT Security 20

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Encryption 52

Encryption Artificial Intelligence Marketing Security 52

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Encryption 52

Encryption Artificial Intelligence Marketing Security 52

Hunton Privacy

MAY 19, 2011

On May 16, 2011, the Article 29 Working Party (the “Working Party”) adopted an Opinion on geolocation services on smart mobile devices (the “Opinion”). Data controllers must enable users to exercise their privacy rights. This also includes the right to access, rectify and erase any profiles that may be derived from personal data.

Personal data 40

Personal data Privacy Access Compliance 40

eSecurity Planet

OCTOBER 21, 2022

There are also security concerns, such as to protect trade secrets or to avoid legal liability in the event of a workplace injury or incident. Fitbit and similar technology can be used to track employees’ exercise routines, with some companies even offering rewards like extra days off for good behavior.

IT 117

IT Computer and Electronics Access Manufacturing 117

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Encryption 52

Encryption Artificial Intelligence Marketing Security 52

The Last Watchdog

NOVEMBER 28, 2018

Both were well-equipped to teach, test and train individuals ranging from teen-agers and non-technical adults, to working system administrators and even seasoned tech security pros. Veterans have an inclination to continually defend their country, and many have security clearances, he says. “We My guess is that Gov.

Cybersecurity 140

Cybersecurity Systems administration Military Manufacturing 140

Data Protector

OCTOBER 11, 2017

Where the Information Commissioner gives notices to data controllers, she can now secure compliance, with the power to issue substantial administrative penalties of up to 4% of global turnover. How then will we secure adequacy without adhering to the charter? Where she finds criminality, she can prosecute.

GDPR 120

GDPR Personal data Government IT 120

HL Chronicle of Data Protection

AUGUST 5, 2019

On 9 July 2019 the UK data protection authority (ICO) updated its Data Sharing Code of Practice (first published in 2011) (Code). In terms of security, the ICO notes that even once the data has been shared, organisations will be expected to take reasonable steps to ensure such data will continue to be well-protected.

GDPR 40

GDPR IT Personal data Compliance 40

Data Matters

NOVEMBER 21, 2017

As of 2011, Saint Lucia has also adopted legislation, but the law has not yet gone into effect. The Bill aims to safeguard the privacy of individuals, by providing privacy and security protections over their “personal data” that are managed by “data controllers.”

Privacy 68

Privacy Personal data Compliance Data breaches 68

Scary Beasts Security

NOVEMBER 14, 2016

The crash is of course deterministic and it would be possible to code the exploit to cater for arbitrary glibc binaries; this is left as an exercise for the reader. These contribute little to the desktop experience but greatly to the security risk. The vulnerability is in libgstnsf.so , an audio decoder present in the gstreamer-0.10

Metadata 55

Metadata Access IT Risk 55

Data Matters

JUNE 25, 2018

Products should be secured during all stages of the lifecycle ,” as it is too easy to assemble botnets when devices lack the ability for effective patching or “remain in service after vendor support ends.”. Botnet Report. Automated, distributed attacks are an ecosystem-wide challenge ” that no “single stakeholder community can address.

Cybersecurity 60

Cybersecurity Government Risk Marketing 60

Hunton Privacy

NOVEMBER 12, 2012

federal privacy, data security and breach notice legislation? House of Representatives have jurisdictional claims to privacy, data security and breach notice legislation: Energy & Commerce, Financial Services and Judiciary. Reporting from Washington, D.C., What are the consequences of the 2012 election on U.S.

Privacy 40

Privacy Security Financial Services Manufacturing 40