Data Matters

NOVEMBER 4, 2020

Third, it creates a new category of businesses: those that voluntarily agree to be subject to the CCPA. Entities must annually buy sell, or share personal information of 100,000 consumers, not 50,000 as under the CCPA, to qualify as a business under the second prong of the test. New Rights for Sensitive Personal Information.

Privacy 122

Privacy B2B Sales Data breaches 122

Hunton Privacy

NOVEMBER 22, 2019

On November 18, 2019, the ranking members from four Senate Committees­ (Senator Maria Cantwell (WA) from Commerce, Senator Dianne Feinstein (CA) from Judiciary, Senator Sherrod Brown (OH), and Senator Patty Murray (WA) from Health, Education, Labor and Pensions) released a set of “core principles” for federal privacy legislation.

Privacy 78

Privacy Education Marketing Security 78

Security Affairs

SEPTEMBER 8, 2019

but that recursive question raised a more general question: what are the differences between cybersecurity educational models? The education process is based upon the information to be shared, by meaning that information is the “starting brick” of education. The information that I had.

Computer and Electronics 72

Computer and Electronics Education Cybersecurity Security 72

IT Governance

AUGUST 21, 2019

The GDPR (General Data Protection Regulation) hasn’t exactly crept up unnoticed over the past year or so, but it’s still caught many organisations by surprise. The GDPR requires you to implement “appropriate technical and organisational measures” to ensure the security and privacy of the personal data your organisation processes.

GDPR 86

GDPR Compliance Personal data Access 86

IT Governance

FEBRUARY 19, 2019

Less than two months remain for healthcare organisations to demonstrate compliance with NHS Digital’s DSP (Data Security and Protection) Toolkit. Ask a healthcare expert >> Data security standards and the GDPR. Ask a healthcare expert >> Data security standards and the GDPR. Unsure if you need to comply?

GDPR 71

GDPR Compliance Government Information Security 71

Hunton Privacy

JULY 11, 2017

On July 10, 2017, the Cyberspace Administration of China published a new draft of its Regulations on Protecting the Security of Key Information Infrastructure (the “Draft Regulations”), and invited comment from the general public. They must conduct this inspection and evaluation at least once a year.

Energy and Utilities 45

Energy and Utilities Security Cybersecurity Manufacturing 45

eSecurity Planet

SEPTEMBER 23, 2022

Securities and Exchange Commission (SEC) strongly advised public companies to improve their cybersecurity. While the new security proposals have not yet become law, cybersecurity managers can begin to prepare metrics and audits that will not only help comply with those laws, but can also help create positive change now.

Cybersecurity 130

Cybersecurity Compliance Risk Communications 130

IT Governance

FEBRUARY 1, 2019

Follow our advice to successfully manage risks and respond to a variety of information security incidents. Under the GDPR (General Data Protection Regulation) , organisations have 72 hours from the moment they become aware of a breach to report the incident. The categories of data subject affected. Describe the impact.

Data breaches 99

Data breaches GDPR Personal data Compliance 99

The Last Watchdog

JUNE 4, 2019

GCIS was a Davos-level conference with no vendors and no selling, where scores of chief security information officers (CISOs), top CEO’s, industry and government thought leaders and leading innovators discussed the myriad challenges in and around cybersecurity and possible solutions in today’s environment. According to the U.S.

Cybersecurity 193

Cybersecurity Computer and Electronics Data science Marketing 193

Data Matters

APRIL 6, 2022

Securities and Exchange Commission (SEC) Division of Enforcement (EXAMS or Division) issued its annual examination priorities. Microcap, Municipal, Fixed Income, and Over-the-Counter Securities. On March 30, 2022, the U.S. Broker-Dealer and Exchange Examination Program.

Retail 88

Retail Compliance Sales Risk 88

DLA Piper Privacy Matters

NOVEMBER 29, 2021

Among the organizations that have designated a DPO, the most represented sectors are, unsurprisingly, the public administration, education and health sectors. Provide information and advice. the detail of the CNIL online DPO designation form and information to be communicated to the CNIL in that respect.

GDPR 116

GDPR Compliance Personal data Communications 116

IT Governance

AUGUST 2, 2019

If you think that charities might be shown lenience under the GDPR (General Data Protection Regulation) , you’re wrong. This is a lesson that the transgender advocacy charity Mermaids learned recently , after it accidentally made internal emails containing confidential client information available online. This isn’t a rare occurrence.

GDPR 56

GDPR Compliance Personal data Risk 56

Hunton Privacy

JULY 28, 2020

On July 23, 2020, the UK Information Commissioner’s Office (the “ICO”) published the first two reports of its Data Protection Regulatory Sandbox Beta phase (the “Beta phase”) involving projects by Jisc (a not-for-profit organization serving the higher and further education and skills sectors) and Heathrow Airport Ltd.

IT 91

IT GDPR Personal data Compliance 91

ForAllSecure

SEPTEMBER 10, 2021

PPP wanted to give their past high school selves the infosec education they didn’t have. And if you're going for a certification like CISSP Computer Information Systems Security Professional, you'll need to have a breadth of experience across multiple domains. For example, when learning a new subject area.

Education 52

Education Cybersecurity IT Marketing 52

Collibra

MARCH 12, 2020

The CCPA officially went into effect on January 1, 2020, impacting over 40 million California residents and thousands of businesses who use personal information (PI) around the globe. Consumers can ask businesses what categories of their PI is being collected. Businesses must provide clear notice about categories of PI it collects.

Data Privacy 59

Data Privacy Privacy Government Compliance 59

Hunton Privacy

NOVEMBER 19, 2013

The law imposes a number of generally applicable principles. In addition, the Act also establishes principles of non-disclosure (confidentiality), security safeguards, retention limitations, data integrity and access and correction rights. Data users in these categories will have three months from November 15 to register.

Personal data 63

Personal data Marketing Communications Insurance 63

Hunton Privacy

OCTOBER 15, 2014

The contours of information covered by the Provisions likely will be further clarified as judges apply the Provisions to individual cases. In general, the Provisions prohibit Internet users and Internet service providers from using the Internet (or other information networks) to disclose or publish personal information.

Privacy 40

Privacy Education IT Information Security 40

ForAllSecure

SEPTEMBER 14, 2022

Hammond: I tend to, I guess, try and explain capture the flag is sort of gamified cybersecurity education. We’ll start with Jeopardy, which is much like the game show, where you have a board with categories and challenges underneath each category each worth increasingly more points. So they want to tackle that category.

Military 40

Military IT Education Cybersecurity 40

ForAllSecure

JANUARY 27, 2021

Vamosi: Today, John has taken his juvenile curiosity in breaking things down to become a security researcher with Huntress Labs. Hammond: As a security researcher, I am hierarchically in their Threat OPs department. Hammond: I tend to explain Capture the Flag is sort of gamified cybersecurity education.

Computer and Electronics 52

Computer and Electronics Military IT Education 52

ForAllSecure

JANUARY 27, 2021

Vamosi: Today, John has taken his juvenile curiosity in breaking things down to become a security researcher with Huntress Labs. Hammond: As a security researcher, I am hierarchically in their Threat OPs department. Hammond: I tend to explain Capture the Flag is sort of gamified cybersecurity education.

Computer and Electronics 52

Computer and Electronics Military IT Education 52

ForAllSecure

APRIL 26, 2022

So there’s a need, a definite need, for information security professionals to have access to industrial control systems -- not virtual, but actual hands on systems -- so they can learn. In a moment I’ll introduce you to someone who is trying to do that--bring ICS equipment to security conferences.

Energy and Utilities 52

Energy and Utilities Manufacturing Risk IT 52

ForAllSecure

MAY 2, 2023

Here’s Attorney General Merrick Garland. US Justice Department: Today, the Justice Department arrested Jack Douglas Teixeira in connection with an investigation into alleged unauthorized removal, retention, and transmission of classified national defense information. VAMOSI: In infosec we talk a lot about OpSec, good and bad.

IT 40

IT Sales Security Honeypots 40