IBM Big Data Hub

OCTOBER 10, 2023

There is also a great deal of tension within financial markets between the requirements on innovation and agility for banking solutions versus the security, compliance and regulatory requirements that CISOs (Chief Information Security Officers) and CROs (Chief Risk Officers) need to guarantee for their financial institutions.

Cloud 82

Cloud Financial Services Compliance Risk 82

Hunton Privacy

JUNE 8, 2020

CIPL has mapped organizations’ real data privacy practices to the CIPL Accountability Framework to provide concrete examples of how to implement effective, demonstrable and enforceable accountability measures through organizations’ privacy management and compliance programs.

Data Privacy 113

Data Privacy Privacy Compliance Risk 113

IBM Big Data Hub

AUGUST 16, 2023

A red team engagement gives your blue team a chance to more accurately assess your security program’s effectiveness and make improvements. Instead, their goal is to expose gaps in cybersecurity defenses, helping security teams learn and adjust their program before an actual attack happens. In practice, they are not.”

Cybersecurity 59

Cybersecurity Security Access Risk 59

Data Matters

JUNE 25, 2021

STEP 1 – Mapping Exercise. This could be important, for example, for direct transfers from consumers in the EU to a service provider in the U.S. The Final Schrems II Recommendations provide a non-exhaustive list of examples of technical, organizational and contractual Supplementary Measures. STEP 2 – Verify Transfer Mechanism.

Personal data 79

Personal data Access Communications Cloud 79

IT Governance

SEPTEMBER 8, 2021

They might, for example, need to approve additional actions or adjust the plan depending on the organisation’s ability to complete certain actions. As such, “conducting tabletop and disaster recovery exercises with everyone remote may be an adaptation, but it isn’t an insurmountable one”. Beware of elevated privileges.

Communications 126

Communications Risk Education Compliance 126

IT Governance

APRIL 2, 2019

Anyone with an interest in information security will have encountered ISO 27001 , the international standard that describes best practice for an ISMS (information security management system). It’s a supplementary standard that provides advice on how to implement the security controls listed in Annex A of ISO 27001.

Information Security 89

Information Security Compliance Risk Security 89

Collibra

JANUARY 14, 2020

Although much of the ink spilled around data privacy focuses on obeying regulations such as the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), it’s a mistake to think about data privacy as a compliance exercise. To take this approach is to miss an opportunity.

Digital transformation 52

Digital transformation Data Privacy Privacy IoT 52

Lenny Zeltser

JANUARY 6, 2021

Malware analysis sits at the intersection of incident response, forensics, system and network administration, security monitoring, and software engineering. As someone who’s helped thousands of security professionals learn how to analyze malware at SANS Institute , I have a few tips for how you can get started.

Metadata 145

Metadata IT Access Security 145

IT Governance

NOVEMBER 16, 2017

If your organisation is concerned about information security, it should have an ISO 27001 -compliant information security management system (ISMS) in place. Implementing an ISMS helps organisations manage their security practices, as well as helping to monitor, audit and improve their information security.

Information Security 53

Information Security Sales Personal data Risk 53

Hunton Privacy

MARCH 11, 2019

On the same date, some participating DPAs released the results of the Sweep exercise carried out in their respective jurisdiction. A few organizations gave examples of good practice, noting that online training systems had been implemented, and network access would be revoked if training was not completed before a specified deadline.

Privacy 74

Privacy Data Privacy GDPR Personal data 74

Hunton Privacy

FEBRUARY 24, 2020

Part four covers how an organization can facilitate the exercise of individual rights in its AI systems, including rights related to solely automated decision-making. The Guidance outlines how these trade-offs can be managed, and provides worked examples to assist organizations in assessing trade-offs.

Personal data 57

Personal data Artificial Intelligence Risk Privacy 57

John Battelle's Searchblog

APRIL 19, 2020

Press reports about “ Zoom bombing ” began dominating the headlines, and as reporters dug in, so did reports of significant (and long ignored) security failings. Zoom responded quickly , freezing product development and focusing entirely on fixing critical security issues. You can find our initial findings here.

Privacy 115

Privacy Data collection Marketing Communications 115

Data Matters

OCTOBER 30, 2017

Responsibility for corporate cybersecurity extends from the chief information security officer’s office, to the C-suite, to the corporate boardroom. Yet despite having processes in place for managing cyberrisks and legal compliance, a recent study shows that many boards have low confidence in the effectiveness of their procedures.[7]

Compliance 60

Compliance Cybersecurity Risk Government 60

Cyber Info Veritas

JULY 18, 2018

On July 2017, one of the most devastating incidents in the history of cyber attacks took place when a group of elite hackers hacked into Equifax, one of the largest credit bureaus in the globe and stole private data including social security numbers, credit card numbers etc of around 145 million clients.

Cybersecurity 40

Cybersecurity Ransomware Information Security Risk 40

DLA Piper Privacy Matters

MAY 16, 2018

So, for example, if a German business targets French customers, it will have to comply not only with the GDPR requirements, but also with the French specific rules (and presumably with German specific rules as well). Processing of the social security number. Processing of criminal records. Children’s consent. Transparency.

GDPR 40

GDPR Personal data Compliance Data Privacy 40

ForAllSecure

APRIL 7, 2021

There are studies that show that men are more likely to apply for jobs that ask for 10 years of Kubernetes experience than bluster their way through the job interview. Women Studies show that unless they meet all the requirements, they're much less likely to apply. So, what, the company wanted one of the creators of Kubernetes?

Cybersecurity 40

Cybersecurity Information Security IT Security 40

ForAllSecure

APRIL 7, 2021

There are studies that show that men are more likely to apply for jobs that ask for 10 years of Kubernetes experience than bluster their way through the job interview. Women Studies show that unless they meet all the requirements, they're much less likely to apply. So, what, the company wanted one of the creators of Kubernetes?

Cybersecurity 40

Cybersecurity Information Security IT Security 40

IBM Big Data Hub

AUGUST 1, 2023

Organizations need to pay attention to several types of incidents, including unplanned interruptions like system outages, network configuration issues, bugs, security incidents, data loss and more. For example, too many people trying to access a server may cause it to crash, creating an incident your organization needs to fix.

Access 62

Access Communications Libraries Digital transformation 62

HL Chronicle of Data Protection

JUNE 17, 2019

Hong Kong’s past reforms to the PDPO have been “event driven”, the best example being the Octopus Rewards case in 2010, which led to extensive reforms to Hong Kong’s direct marketing controls. DPP 4 Analysis: Data Security. The Incident.

Personal data 40

Personal data Data breaches Security Compliance 40

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Encryption 52

Encryption Artificial Intelligence Marketing Security 52

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Encryption 52

Encryption Artificial Intelligence Marketing Security 52

ForAllSecure

AUGUST 30, 2022

I’m Robert Vamosi and in this episode I’m talking about cyber ranges-- simulations that can both teach and improve the security of your networks. A red team would be the enemy and they’d study your network and try to exploit any weaknesses. Layer two is going to be the automation of, say the security tools.

Military 40

Military Energy and Utilities Government IT 40

Data Matters

OCTOBER 24, 2019

The Attorney General’s proposed regulations are thick with important provisions, and businesses should study the full regulations carefully. Need for Security Measures. HIGHLIGHTS. Require businesses that provide financial incentives for different types of products or services based on the value of the consumer’s information (e.g.,

Privacy 60

Privacy Sales Authentication Passwords 60

eSecurity Planet

APRIL 9, 2024

SaaS security checklists are frameworks for protecting data and applications in cloud-based environments. They serve as benchmarks for upholding strong security requirements, evaluating existing tools, and assessing potential solutions. We’ve designed a customizable template to help you develop your own SaaS security checklist.

Security 100

Security Compliance Cybersecurity Communications 100

eSecurity Planet

OCTOBER 21, 2022

According to a study conducted by StandOut CV , 1 in 5 companies are using some sort of employee monitoring tool. There are also security concerns, such as to protect trade secrets or to avoid legal liability in the event of a workplace injury or incident. Want to Make Sure Remote Workers Can Access Your Network Securely?

IT 127

IT Computer and Electronics Access Manufacturing 127

ForAllSecure

NOVEMBER 24, 2020

In this episode I talk about how Heartbleed (CVE 2014-0160) was found and also interview Rauli Kaksonen, someone who was at Codenomicon at the time of its discovery and is now a senior security specialist at the University of Oulu in Finland, about how new security tools are still needed to find the next big zero day. Apple Podcasts.

Encryption 52

Encryption Artificial Intelligence Marketing Security 52

John Battelle's Searchblog

JUNE 19, 2012

For example, our offline identity is established by a government ID like a driver’s license. Prior to email, our private correspondance was secured by a government institution called the postal service. Google is setting an example I hope all corporations with access to our data will follow. Yahoo’s?

Government 93

Government Access Compliance Cloud 93

Brandeis Records Manager

SEPTEMBER 10, 2015

Certain topics in the test material like duplex-numeric and block-numeric filing conventions don’t always cross our desks in the trenches, but they do provide a good logical grounding for our vast discipline, and I feel fortified for studying them. BYOD can introduce threats to the security of your organization’s information.”.

Records Management 49

Records Management B2B Compliance Mining 49

Brandeis Records Manager

MARCH 18, 2017

This may be an exercise in preaching to the RM/IG choir, but here goes…. The “record” of survival equates with a sense of security among the most dangerous conditions. For example, I’ll be presenting on The Principles (can I still say “GARP”?) People in our line of work can always use a boost. Pretty powerful stuff.

Records Management 46

Records Management Fact denial IoT Libraries 46

Data Matters

OCTOBER 22, 2019

The Attorney General’s proposed regulations are thick with important provisions, and businesses should thus study the full regulations carefully. The regulations require businesses to explain that they may not discriminate against consumers who exercise their CCPA rights. Highlights. Right to Non-Discrimination. Authorized Agent.

Privacy 60

Privacy Sales Paper Compliance 60

IBM Big Data Hub

JULY 19, 2023

This blog post is part of the “All You Need to Know About Red Teaming” series by the IBM Security Randori team. The Randori platform combines attack surface management (ASM) and continuous automated red teaming (CART) to improve your security posture. Today, cybersecurity teams continue to learn this lesson the hard way.

Cybersecurity 67

Cybersecurity Security Access Passwords 67

HL Chronicle of Data Protection

OCTOBER 8, 2018

For example, a non-profit research institution that is controlled by a for-profit business and shares common branding or a non-profit charitable subsidiary of a for-profit parent company may be subject to the CCPA. Does the company maintain medical information on behalf of a health care provider? Clinical Trial Exemption.

Privacy 45

Privacy Healthcare Sales Insurance 45

HL Chronicle of Data Protection

OCTOBER 8, 2018

For example, a non-profit research institution that is controlled by a for-profit business and shares common branding or a non-profit charitable subsidiary of a for-profit parent company may be subject to the CCPA. Does the company maintain medical information on behalf of a health care provider? Clinical Trial Exemption.

Privacy 40

Privacy Healthcare Sales Insurance 40

HL Chronicle of Data Protection

OCTOBER 8, 2018

For example, a non-profit research institution that is controlled by a for-profit business and shares common branding or a non-profit charitable subsidiary of a for-profit parent company may be subject to the CCPA. Does the company maintain medical information on behalf of a health care provider? Clinical Trial Exemption.

Privacy 40

Privacy Healthcare Sales Insurance 40

CILIP

NOVEMBER 7, 2020

Even so, they were busy providing study space for students with nowhere else to work. Case Studies. This is a good example of how the British Council exercises ?soft In a shopping mall, for example, curious shoppers and young families experienced ?library UK Study Tours. soft power? and influence abroad.

Libraries 52

Libraries e-Delivery Government Communications 52

KnowBe4

JULY 5, 2023

But I don't think an attack of such magnitude as the one identified by security researchers at Internet security monitoring vendor Bolster. This latest impersonation campaign makes the case for ensuring users are vigilant when interacting with the web – something accomplished through continual Security Awareness Training.

Phishing 82

Phishing Security awareness Passwords Computer and Electronics 82

Data Protector

OCTOBER 11, 2017

Where the Information Commissioner gives notices to data controllers, she can now secure compliance, with the power to issue substantial administrative penalties of up to 4% of global turnover. How then will we secure adequacy without adhering to the charter? Where she finds criminality, she can prosecute.

GDPR 120

GDPR Personal data Government IT 120