Data Breach Today

NOVEMBER 16, 2023

Regulating AI is "like regulating Jell-O," said Massachusetts risk counsel Jenny Hedderman, but states are looking at regulating "areas of harm" rather than AI as a whole. In this episode of "Cybersecurity Insights," Hedderman discusses privacy, third-party vendor risk, and lawyers' use of AI.

Privacy 278

Privacy Government Risk Cybersecurity 278

Schneier on Security

MARCH 1, 2024

of the Cybersecurity Framework: The CSF 2.0, which supports implementation of the National Cybersecurity Strategy , has an expanded scope that goes beyond protecting critical infrastructure, such as hospitals and power plants, to all organizations in any sector. ’s newly added Govern function. This is a big deal.

Cybersecurity 107

Cybersecurity Risk Government Security 107

Data Protection Report

NOVEMBER 28, 2023

In a world where generative AI is driving innovation and technology is outpacing legislation, there’s a lot for companies to consider to maintain operational effectiveness and minimize risk. To help provide some guidance, Norton Rose Fulbright Canada hosted its 2023 technology, privacy and cybersecurity virtual summit.

Cybersecurity 136

Cybersecurity Risk Artificial Intelligence Privacy 136

Data Breach Today

MAY 26, 2021

William Dixon of World Economic Forum on Improving Infrastructure To unlock the value of quantum computing, two systemic risks - tech governance and cybersecurity - need to be overcome, says William Dixon of the World Economic Forum.

Risk 261

Risk Cybersecurity Government 261

Data Matters

MARCH 11, 2022

Securities and Exchange Commission (SEC) proposed new cybersecurity rules to enhance and standardize disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting by public companies. Reporting material cybersecurity incidents within four days.

Cybersecurity 88

Cybersecurity Risk Government e-Discovery 88

Data Breach Today

JANUARY 11, 2019

Readiness, Morale, Investigations and Recruitment at Risk as Standoff Persists The U.S.

Cybersecurity 257

Cybersecurity Government Risk IT 257

Data Breach Today

APRIL 5, 2022

Witnesses at Hearing Also Discuss Role of Government in Security Incident Response A water trade association, at a congressional hearing Tuesday, urged the federal government to institute minimum cybersecurity standards for water systems.

Risk 246

Risk IT Government Cybersecurity 246

The Last Watchdog

AUGUST 29, 2023

Here’s what you should know about the risks, what aviation is doing to address those risks, and how to overcome them. It is difficult to deny that cyberthreats are a risk to planes. Risks delineated Still, there have been many other incidents since. Fortunately, there are ways to address the risks.

Risk 264

Risk Artificial Intelligence Cybersecurity Compliance 264

Data Breach Today

SEPTEMBER 14, 2023

agencies to address hard problems like quickly writing secure code but comes with risks around nation-states generating attacks more efficiently. The cybersecurity element is a great example of the bright and the dark side of AI technology," said White House Director Arati Prabhakar.

Artificial Intelligence 269

Artificial Intelligence Government Cybersecurity Risk 269

Data Breach Today

JANUARY 29, 2021

Report on Canceled VA Project Offers Governance Lessons for Others The Department of Veterans Affairs’ watchdog agency alleges that two VA employees “concealed” and “mispresented” the cybersecurity and privacy risks of an ambitious "big data" project that would have analyzed 22 million veterans’ health records dating back two decades.

Big data 311

Big data Risk Privacy Security 311

The Last Watchdog

DECEMBER 14, 2023

Here’s the final installment of leading technologists sharing their observations about cybersecurity developments in the year that’s coming to a close — and the year to come. Last Watchdog posed two questions: •What should be my biggest takeaway from 2023, with respect to mitigating cyber risks at my organization?

Cybersecurity 234

Cybersecurity Encryption Marketing Risk 234

Data Matters

OCTOBER 28, 2022

Recently, several developments have been proposed or announced to help identify and mitigate cyber risk for United States critical infrastructure operators and software in an effort to further bolster the cybersecurity posture of the federal government.

Cybersecurity 88

Cybersecurity Government Privacy Risk 88

eSecurity Planet

NOVEMBER 18, 2022

Ray has wasted little time in assembling a top-notch team, which includes an unnamed cybersecurity forensics firm. He has “worked around the clock” to secure assets, identify crypto on the blockchain , find records, and work with regulators and government authorities. Crypto can also be a way to leverage cybersecurity breaches.

Cybersecurity 143

Cybersecurity Risk Blockchain Mining 143

Data Breach Today

OCTOBER 4, 2023

Experts Warn Vulnerability Disclosure to Government Agencies Increases Hacking Risks More than four dozen cybersecurity mavens say a proposed European Union mandate for software publishers to inform the trading bloc's cybersecurity agency of zero day exploits within 24 hours of their discovery risks harming cybersecurity efforts.

Cybersecurity 288

Cybersecurity Risk Government 288

KnowBe4

APRIL 1, 2024

The UK government's third phase of research shows how well UK organizations have been improving their cybersecurity efforts but indicates that the risk from certain attacks have only been reduced marginally.

Cybersecurity 93

Cybersecurity Risk Government Security awareness 93

eSecurity Planet

APRIL 29, 2024

Integrated risk management (IRM) is a discipline designed to embed risk considerations for the use of technology throughout an organization. In other words, it links technology spending directly to the value of the resource protected and the associated risks controlled by that technology.

Risk 67

Risk Compliance Communications Insurance 67

The Last Watchdog

SEPTEMBER 25, 2023

If you’re a small business looking for the secret sauce to cybersecurity, the secret is out: start with a cybersecurity policy and make the commitment to security a business-wide priority. The average cost of a cybersecurity breach was $4.45 The average cost of a cybersecurity breach was $4.45 Stay proactive.

Cybersecurity 222

Cybersecurity Data breaches Compliance Phishing 222

Schneier on Security

APRIL 27, 2023

Stanford and Georgetown have a new report on the security risks of AI—particularly adversarial machine learning—based on a workshop they held on the topic. Many AI products are deployed without institutions fully understanding the security risks they pose.

Risk 100

Risk Security Cybersecurity Government 100

Data Breach Today

SEPTEMBER 25, 2023

Securities and Exchange Commission rules, companies must disclose material cybersecurity incidents and annually report on cybersecurity risk management, strategy and governance. TrustedSec's Alex Hamerstone on New US Securities and Exchange Commission Rules Under new U.S.

Cybersecurity 277

Cybersecurity Risk Government Security 277

The Security Ledger

MAY 15, 2024

Cybersecurity is crucial in supply chains, where risks can affect all connected parties. With significant consequences and substantial government contracts at stake, effective risk management and rigorous. Read the whole entry. »

Cybersecurity 52

Cybersecurity Passwords Compliance Risk 52

Schneier on Security

NOVEMBER 3, 2023

Another example of a large and influential state doing things the federal government won’t: Boards of directors, or other senior committees, are charged with overseeing cybersecurity risk management, and must retain an appropriate level of expertise to understand cyber issues, the rules say.

Cybersecurity 105

Cybersecurity Risk Government Security 105

Data Protection Report

NOVEMBER 8, 2023

On November 1, 2023, the New York Department of Financial Services (“NYDFS”) released the finalized amendments of Part 500 of its cybersecurity regulations. This notice requirement explicitly applies to cybersecurity incidents occurring to the covered entity itself, its affiliates, or a third-party service provider.

Financial Services 110

Financial Services Cybersecurity Compliance Government 110

eSecurity Planet

DECEMBER 7, 2022

Despite all this, there is one tech category that has held up fairly well: Cybersecurity. Just look at a report from M&A advisory firm Houlihan Lokey , which found that private cybersecurity company funding grew by 9.4% There have been a number of impressive funding rounds this year for cybersecurity startups.

Cybersecurity 145

Cybersecurity Compliance Risk Ransomware 145

IBM Big Data Hub

OCTOBER 16, 2023

As more businesses use AI systems and the technology continues to mature and change, improper use could expose a company to significant financial, operational, regulatory and reputational risks. This is where AI governance comes into play: addressing these potential and inevitable problems of adoption.

Government 76

Government Risk Artificial Intelligence Metadata 76

Data Protection Report

NOVEMBER 2, 2023

On November 1, 2023, the New York Department of Financial Services (NYDFS) finalized the second amendment to its cybersecurity regulations, which are available here. NYDFS retained the broader term “cybersecurity event” that it uses in several sections of the regulation, but, with respect to notifications to NYDFS (§ 500.17(a)),

Cybersecurity 105

Cybersecurity Compliance Financial Services Government 105

Schneier on Security

AUGUST 2, 2023

The US Securities and Exchange Commission adopted final rules around the disclosure of cybersecurity incidents. There are two basic rules: Public companies must “disclose any cybersecurity incident they determine to be material” within four days, with potential delays if there is a national security risk.

Cybersecurity 84

Cybersecurity Risk Privacy Information Security 84

The Last Watchdog

SEPTEMBER 7, 2022

Finally, Uncle Sam is compelling companies to take cybersecurity seriously. Cybersecurity Maturity Model Certification version 2.0 could take effect as early as May 2023 mandating detailed audits of the cybersecurity practices of any company that hopes to do business with the Department of Defense. Raising the bar.

Cybersecurity 289

Cybersecurity Digital transformation Compliance Risk 289

Data Protection Report

AUGUST 29, 2022

On July 13, 2022, the Office of the Superintendent of Financial Institutions (OSFI) released its final Guideline B-13 (the Guideline), setting out technology and cyber risk management expectations for all federally regulated financial institutions (FRFIs), such as banks, insurance and trust companies. Read the full update here.

Risk 116

Risk Insurance Cybersecurity Government 116

Hunton Privacy

JULY 5, 2023

On June 28, 2023, the New York Department of Financial Services (“NYDFS”) published an updated proposed Second Amendment (“Amendment”) to its Cybersecurity Regulation, 23 NYCRR Part 500. As described below, senior governing bodies would have new oversight responsibilities under the amendments.

Cybersecurity 113

Cybersecurity IT Compliance Financial Services 113

The Last Watchdog

APRIL 13, 2022

These Russian cyber actors are government organizations and include other parties who take their orders from the Russian military or intelligence organizations – while not technically under government control. Cybersecurity and Infrastructure Security Agency (CISA) has started a campaign to increase awareness of these risks to U.S.

Cybersecurity 214

Cybersecurity Military Passwords Education 214

Krebs on Security

JUNE 15, 2023

government agency in charge of improving the nation’s cybersecurity posture is ordering all federal agencies to take new measures to restrict access to Internet-exposed networking equipment. The directive comes amid a surge in attacks targeting previously unknown vulnerabilities in widely used security and networking appliances.

Risk 215

Risk Ransomware Cybersecurity Access 215

Data Breach Today

SEPTEMBER 29, 2022

Cyber Insurers Limit Financial Exposure While Risk Grows The Department of Treasury and the Cybersecurity and Infrastructure Agency are soliciting comments on whether risks to critical infrastructure from a catastrophic cyber attack - and the concurrent potential for ruinous financial exposure by insurers - should lead to a new federal approach.

Insurance 130

Insurance Government Risk Cybersecurity 130

eSecurity Planet

FEBRUARY 26, 2024

To secure sensitive data, cybersecurity specialists, software vendors, and end users should encourage collaborative efforts against malicious activities. Users are strongly recommended to quickly upgrade their Bricks Builder Theme installations to this current version to reduce the risk of exploitation.

Risk 113

Risk Authentication Systems administration Ransomware 113

Daymark

SEPTEMBER 29, 2022

The Cybersecurity Maturity Model Certification (CMMC) 2.0 is the DoD framework designed to enhance cybersecurity and protect against compromise of sensitive defense information on contractors’ systems. requirements. requirements. Here’s why:

Compliance 103

Compliance Risk Cybersecurity Government 103

The Last Watchdog

NOVEMBER 29, 2023

The report outlines 12 predictions and strategies to help IT, security, risk management, and compliance leaders tackle data privacy and cyber-risk challenges for the coming year. About Kiteworks: Kiteworks’ mission is to empower organizations to effectively manage risk in every send, share, receive, and save of sensitive content.

Risk 100

Risk Data Privacy Compliance Communications 100

The Security Ledger

MAY 16, 2024

In this Spotlight Podcast, host Paul Roberts talks with Chris Walcutt, the CSO of DirectDefense about the rising cyber threats facing operational technology (OT) and how organizations that manage OT - including critical infrastructure owners can best manage increased cyber risks to OT environments. Read the whole entry. »

Risk 52

Risk Energy and Utilities Cybersecurity Systems administration 52

The Last Watchdog

APRIL 1, 2020

Related: What we’ve learned from the massive breach of Capitol At RSA 2020 , I learned about how one of the routine daily chores all large organizations perform — data governance — has started to emerge as something of a cybersecurity multiplier. A robust data archiving strategy puts data into tiers, Lahiri says.

Government 149

Government Cybersecurity Archiving Access 149