article thumbnail

Learnings from ALM/Law.com Legalweek 2024: Six Key Takeaways

eDiscovery Daily

Put social engineering/phishing training in place for all employees; aim to get the collective “click” rate on planted phishing emails below 5% Make sure your third-party tech providers have the basics in place: for example, end point security and multifactor authentication When it comes to incident response planning, timing and context matter.

CMS 41
article thumbnail

Learning from ALM/Law.com Legalweek 2024: Six Key Takeaways

eDiscovery Daily

Put social engineering/phishing training in place for all employees; aim to get the collective “click” rate on planted phishing emails below 5% Make sure your third-party tech providers have the basics in place: for example, end point security and multifactor authentication When it comes to incident response planning, timing and context matter.

CMS 41
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

CVS Pays $2.25 Million in Record HIPAA Settlement

Hunton Privacy

In the Consent Order, the FTC specifically highlighted CVS’s failure to render PHI unreadable before disposal as well as its claim in its privacy notice that maintaining the privacy of its customers’ PHI was central to its operations as examples of unfair or deceptive trade practices.

CMS 49
article thumbnail

Part 3: OMG! Not another digital transformation article! Is it about effecting risk management and change management?

ARMA International

Take the example of the pandemic: only some governments engaged pandemic experts to develop actions plans. Consider another example: the 1972 Summer Olympics in Munich, when terrorists took Israeli athletes hostage. As an example of a CSF, Table 1 defines the capabilities for CS to progress from Level 1 to Level 5.