IT Governance

APRIL 27, 2018

This week, we discuss TSB’s chaotic system upgrade, a security flaw in electronic hotel locks and a major NATO cyber security exercise. Hello and welcome to the IT Governance podcast for Friday, 27 April 2018. According to CCDCOE, the exercise is running from 23 to 27 April. Here are this week’s stories.

Military 49

Military Manufacturing Information Security Access 49

Security Affairs

FEBRUARY 4, 2022

The Russia-linked Gamaredon APT group attempted to compromise an unnamed Western government entity in Ukraine. In Mid January the Ukrainian government was hit with destructive malware, tracked as WhisperGate , and several Ukrainian government websites were defaced by exploiting a separate vulnerability in OctoberCMS.

Government 85

Government Military Phishing Information Security 85

Data Protection Report

SEPTEMBER 28, 2021

On 10 September 2021, the UK Government published its consultation paper on proposals to reform the UK’s data protection regime. On legitimate interests, the Government proposes disapplying the legitimate interest balancing test for certain activities. The deadline for responding to the consultation is 19 November 2021.

Government 119

Government FOIA GDPR Compliance 119

Data Protection Report

JUNE 22, 2022

UK GDPR Reform: government publishes response to consultation – likely to form basis of forthcoming UK Data Reform Bill. The Department for Culture, Media and Sport (DCMS) has finally published the UK government’s long-awaited response to the consultation on the future of the UK data protection regime. Reform of Article 22.

GDPR 144

GDPR Government Personal data Risk 144

CILIP

MARCH 6, 2024

We know from our work across the UK that Local Government also urgently needs long-term sustainable financial support so that libraries can help everyone to enjoy a brighter future. CILIP is calling for a fair funding settlement to Local Government, allowing for real reinvestment into local services, including libraries.

Libraries 86

Libraries Sales Risk Government 86

Adam Levin

JANUARY 15, 2019

citizens are more vulnerable to the effects of identity theft and scams as a result of the ongoing government shutdown. The two primary websites created by the government as resources for victims of identity theft, IdentityTheft.gov and FTC.gov/complaint , are currently offline as part of the partial shutdown of the Federal Trade Commission.

Government 87

Government Phishing Encryption Communications 87

Collibra

MAY 5, 2020

They need data governance. . They need data governance. What does data governance do? Governance delivers the context, relationships, lineage, and access data citizens need to make decisions around data. Data governance provides background on where data came from, how it’s used, and how trustworthy it is.

Data Privacy 71

Data Privacy Government Privacy Compliance 71

Collibra

NOVEMBER 20, 2020

So your team has identified implementing data governance as a priority for the year. But what happens once you purchase a data governance platform? This article is meant to outline the vital steps for implementing data governance. Why a data governance roadmap is vital. 10 steps to successful data governance.

Government 52

Government Education Communications Metadata 52

IT Governance

MARCH 30, 2023

These rights can be exercised by first submitting a DSAR (data subject access request). If the individual is unhappy with any of the details provided in this access request, they can exercise one of their data subject rights, including the right to erasure. This is where IT Governance can help. Can you charge a fee?

GDPR 105

GDPR Personal data Compliance Government 105

Data Matters

SEPTEMBER 30, 2020

government released a “White Paper” addressing how U.S. law and practice relating to government access to data for national security purposes,” especially as that information bears on “issues that appear to have concerned the ECJ in Schrems II ” and as it “may bear on many companies’ analyses” of how their reliance on SCCs conforms to EU law.

Paper 128

Paper Government Security Privacy 128

IG Guru

MARCH 10, 2020

” The post To the Victor Go the Spoliation Sanctions: Eastern District of Louisiana Exercises Inherent Power to Issue Sanctions for Spoliation via JD Supra appeared first on IG GURU.

IT 52

IT Records Management Information governance Risk 52

Security Affairs

JANUARY 16, 2022

The simulation took place on Friday and is part of a six-week exercise aimed at testing also the cooperation among member states and their joint response. The start of the cyber exercise was concurrent with the attacks against tens of Ukraine’s government websites. ” reads the post published by Bloomberg.

Government 121

Government IT Security Information Security 121

Security Affairs

DECEMBER 13, 2023

A Joint Committee on the National Security Strategy (JCNSS) warns of the high risk of a catastrophic ransomware attack on the UK government. The British government is accused of failing to mitigate the risk of ransomware attacks. Beckett recommends the UK government consider defense from ransomware attacks a top political priority. “in

Ransomware 98

Ransomware Risk Government Cybersecurity 98

Security Affairs

APRIL 1, 2024

The US government announced establishing the Office of the Assistant Secretary of Defense for Cyber Policy. Exercising authority, direction, and control over the official designated as Deputy PCA concerning their Deputy PCA duties. Spearheading the DoD’s implementation of national-level cyberspace policies.

Military 108

Military Government Security Information Security 108

Hunton Privacy

DECEMBER 2, 2020

On November 25, 2020, the European Commission published its Proposal for a Regulation on European Data Governance (the “Data Governance Act”). The Data Governance Act is part of a set of measures announced in the 2020 European Strategy for Data , which is aimed at putting the EU at the forefront of the data empowered society.

Government 70

Government Personal data Compliance GDPR 70

Gimmal

JUNE 10, 2022

Craig Carpenter and Dean Gonsowski , Gimmal’s CEO and CRO respectively, spoke with Ari about information discovery, migration, governance, and compliance, and how Gimmal helps organization address their biggest information governance challenges. It started as a GRC — governance risk and compliance — consulting firm.

Information governance 52

Information governance Government Privacy Risk 52

CGI

JULY 23, 2019

Setting the standards in cybersecurity, part I: governance. In this first of a three-part blog series, I explore the role of cybersecurity standards in the larger IT governance context. Cybersecurity standards are a key step in the IT governance process as a means for managing and containing risk to acceptable levels.

Government 49

Government Cybersecurity Digital transformation Compliance 49

Information Management Resources

APRIL 10, 2019

Organizations need to ensure that the exercise of data governance is non-invasive and transparent so it does not seem forceful.

Government 37

Government IT 37

John Battelle's Searchblog

JANUARY 25, 2019

My current work is split between two projects: One has to do with data governance, the other political media. And second… Governance. Government – well for sure, I’d wager that’s increased given who’s been running the country these past two years. But Governance? Data Governance. We’ll start with Governance.

Government 92

Government IT Marketing ROT 92

The Last Watchdog

AUGUST 23, 2021

For instance, if you have employees in China and the EU, you’ll have to obtain Chinese government approval to provide data from China to EU authorities enforcing the GDPR. Government Monitoring. Similarly, different nations exercise varying amounts of authority over internet traffic.

Communications 220

Communications Cybersecurity GDPR Risk 220

Hunton Privacy

MAY 12, 2023

This independent exercise will provide critical information to researchers and the public about the impacts of these models, and will enable AI companies and developers to take steps to fix issues found in those models. government is leading by example on mitigating AI risks and harnessing AI opportunities. Policies to ensure the U.S.

Artificial Intelligence 110

Artificial Intelligence Agriculture Cybersecurity Risk 110

IT Governance

OCTOBER 13, 2021

The two-day course is the most effective as it contains practical exercises for each module, helping you learn by applying your new knowledge to the sort of situations you will encounter at work. . Please note that this two-day course includes practical, hands-on lab exercises. . training with IT Governance ? . your course?via

Cloud 98

Cloud Compliance Government Access 98

The Guardian Data Protection

MAY 11, 2022

Prof Ben Goldacre cited risks of deanonymisation as his main reason for withdrawing his consent The author of a government review into medical data sharing personally opted out of the aborted plan to share GP health data , a parliamentary committee has heard.

Risk 65

Risk Government Privacy 65

AIIM

APRIL 13, 2021

He refers to the current attention on privacy matters as “privacy theater,” believing that apps are grabbing more of our data than they need to get the job done, and any assertion that these brands care about our personal data is largely a public relations exercise. and Jasen Hutchinson, Manager, Corporate Records Compliance, JEA.

Data Privacy 157

Data Privacy Privacy Artificial Intelligence Personal data 157

Everteam

JANUARY 9, 2019

Keeping up with the constantly changing and growing legal and compliance regulations can seem like an exercise in frustration. Governance policies related to how you use and manage data cross departments and applications, and trying to manage them all in a spreadsheet simply doesn’t make sense. Managing retention policies.

Government 40

Government Compliance Metadata Communications 40

John Battelle's Searchblog

NOVEMBER 4, 2011

( image ) As I begin to dig into the work of my next book, I’ve found myself thinking about politics and government far more than I anticipated. For initial thoughts and stats, see Government By Numbers: Some Interesting Insights ). I focus on the US for this exercise, as I am writing from my own experience.

Government 105

Government Education Military Communications 105

Data Protector

AUGUST 17, 2020

If the UK receives an EU adequacy assessment, presumably the UK Government will simply anglicise the new EU SCCs and ask UK organisations to use the new versions for the Non-EU, UK - Rest of the World data flows. To expect them to commission a similar exercise so soon is cruel (and costly). It could take years to complete.

GDPR 120

GDPR Personal data Government Privacy 120

Hunton Privacy

AUGUST 10, 2023

The final text of the DPDPB as passed has not yet been released, but India’s Ministry of Electronics & Information Technology released a description of the DPDPB’s “salient features” which include: Obligations of “data fiduciaries” ( i.e. , persons, companies and government entities who process data), including as to security safeguards, data breach (..)

Personal data 52

Personal data Data breaches Government Access 52

OpenText Information Management

MARCH 28, 2024

Defending against Advanced Persistent Threats (APT) A leading financial investment management organization put their security posture to the test and OpenText stood out as the sole solution that detected an unannounced advanced red team exercise. Kevin has more than 10 years experience in cybersecurity engineering and consulting.

Cybersecurity 63

Cybersecurity Military IoT Security 63

Hunton Privacy

JULY 5, 2023

NYDFS clarified that where a cybersecurity program or part of a cybersecurity program is adopted from an affiliate, the “senior governing body” ( e.g. , a board or equivalent governing body) may be that of the affiliate. As described below, senior governing bodies would have new oversight responsibilities under the amendments.

Cybersecurity 113

Cybersecurity IT Compliance Financial Services 113

Data Protector

AUGUST 17, 2020

One of the Government's core objectives throughout the Brexit negotiations has been to respect data protection rights, slash Brussels' red tape and allow the United Kingdom to be a competitive safe haven for businesses all over the world. No longer might UK privacy pros feel obliged to wait for the publication of weirdly worded EDPB opinions.

Privacy 156

Privacy GDPR Personal data Computer and Electronics 156

Security Affairs

AUGUST 4, 2020

China-linked hackers carried out cyber espionage campaigns targeting governments, corporations, and think tanks with TAIDOOR malware. China has been using #Taidoor malware to conduct #cyber espionage on governments, corporations, and think tanks. US government agencies published the Malware Analysis Report MAR-10292089-1.v1

Healthcare 107

Healthcare Passwords Government Systems administration 107

CILIP

MARCH 18, 2024

As part of the campaign, we also urged members, library supporters and sector leaders to send a message to the Chancellor on X (formerly Twitter) with the hashtag, #DearChancellor to spread the word across social media channels, to open a new channel to local and national government officials.

Libraries 82

Libraries Risk Sales Government 82

Security Affairs

FEBRUARY 12, 2023

Australia’s Defense Department announced that they will remove surveillance cameras made by Chinese firms linked to the government of Beijing. Australia’s Defense Department is going to replace surveillance cameras made by Chinese firms Hikvision and Dahua, who are linked to the government of Beijing. ” reported The Guardian. .”

Manufacturing 90

Manufacturing Government Risk Communications 90

IT Governance

APRIL 4, 2024

In this interview Topics covered by CISM Who CISM is aimed at Career opportunities Alternatives to CISM The benefits of IT Governance’s CISM training course What ground does CISM cover? IT Governance offers a CISM training course. IT Governance is expert-led: all trainers are qualified in the subjects they teach.

Information Security 116

Information Security Cloud Government Security 116

Security Affairs

OCTOBER 13, 2023

This joint CSA updates the advisory published by the US Government on March 17, 2022. The advisory also recommends organizations exercise, test, and validate their security program against the threat behaviors mapped to the MITRE ATT&CK for Enterprise framework in this advisory.

Ransomware 115

Ransomware Systems administration Cybersecurity Encryption 115

Thales Cloud Protection & Licensing

JUNE 14, 2022

Furthermore, evolving government policy and financial regulations are beginning to weigh in on the legality of the payment of ransoms, making it even more perilous when deciding what makes sense for a business under attack. And perhaps most importantly, ensure that all those plans are exercised and tested on a regular basis.

Ransomware 71

Ransomware Government Risk Data breaches 71