Adam Shostack

DECEMBER 8, 2016

The title captures the question: Effectiveness Of Using Card Games To Teach Threat Modeling For Secure Web Application Developments. Quizzes were administered both before and after the activity, and a survey was taken to measure student attitudes toward the exercise. I’m very glad to see games like Cornucopia evaluated.

Security 40

Security Paper Cybersecurity 40

IT Governance

NOVEMBER 21, 2019

UK organisations are overlooking the importance of cyber security staff awareness training, instead investing in expensive and unnecessary technologies, a VMware and Forbes Insight study has found. So, why are businesses trapped in this cycle of investing in cyber security solutions they don’t need? Same solutions, same results.

Security 73

Security Information Security Government Security awareness 73

HL Chronicle of Data Protection

JULY 7, 2020

Under the European Union’s General Data Protection Regulation (GDPR), individuals have the right to access personal data collected about them, and to exercise that right easily and at reasonable intervals.

GDPR 112

GDPR Personal data Data collection Access 112

Security Affairs

APRIL 15, 2022

Cybersecurity experts would have you believe that your organization’s employees have a crucial role in bolstering or damaging your company’s security initiatives. Now is the moment to train your personnel on security best practices, if you haven’t already. Customize Your Security Training.

Cybersecurity 73

Cybersecurity Data Privacy Data breaches Privacy 73

AIIM

NOVEMBER 5, 2018

In particular, Google has recently published a Framework for Responsible Data Protection Regulation that espouses broader data subject rights, provides for enhanced transparency, accountability and provisions for privacy by design embedded in software that enables data subjects to exercise greater control over their privacy settings.

Privacy 80

Privacy Artificial Intelligence GDPR Analytics 80

IT Governance

OCTOBER 23, 2019

Brexit is clearly a pressing issue for many organisations, but we urge you to exercise caution whenever you receive communications out of the blue relating to the UK’s departure from the EU. See also: Government surveys further education providers before Brexit.

Phishing 61

Phishing Security awareness Education Personal data 61

CGI

MARCH 3, 2019

Where sensitive information is exchanged, it is important that responsibility for cyber security is also shared. Without agreements and a clear understanding of each company’s security role, your supplier could become the weakest security link in your ecosystem. This is especially important when it comes to personal information.

GDPR 45

GDPR Insurance Data breaches Personal data 45

eSecurity Planet

MAY 24, 2024

Cloud security fundamentals are the core requirements that ensure data protection, regulatory compliance, and access management in a cloud environment. Understanding cloud security challenges and knowing the cloud security tools available in the market significantly contribute to enhanced cloud security.

Cloud 72

Cloud Security Compliance Encryption 72

Collibra

JANUARY 14, 2020

Although much of the ink spilled around data privacy focuses on obeying regulations such as the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), it’s a mistake to think about data privacy as a compliance exercise. To take this approach is to miss an opportunity.

Digital transformation 52

Digital transformation Data Privacy Privacy IoT 52

AIIM

MARCH 16, 2021

Here is an outline of the steps included in this exercise to build your Metadata plan. During this step, conduct interviews, surveys, or workshops to gain input from business, IT, and records management stakeholders. Today, we'll be taking the next step and exploring how to build your Metadata plan. Let's get started!

Metadata 163

Metadata ECM Customer Experience Analytics 163

IT Governance

SEPTEMBER 25, 2019

A 2018 InsuranceBee survey found that 83% of organisations didn’t have any money reserved to recover from a cyber attack, and a quarter were unaware that security incidents had significant financial consequences. Secure wireless networks. Software providers regularly release updates to fix security flaws that they’ve discovered.

Data breaches 69

Data breaches Phishing Passwords Ransomware 69

IT Governance

NOVEMBER 23, 2018

And how much would it take to dissuade others from persisting with poor security measures, out-of-date systems and software, and poorly trained staff? We’ve conducted a survey to determine the extent of organisations’ GDPR compliance in the months after the Regulation took effect. Catching up: it’s not too late to comply.

GDPR 68

GDPR Compliance Personal data Data breaches 68

Hunton Privacy

JUNE 10, 2015

Hunton & Williams LLP’s Global Privacy and Cybersecurity practice group has written a portfolio for Bloomberg BNA on information security and data breach issues in the United States and globally. Cybersecurity and Data Breach is available at Bloomberg BNA’s Privacy & Data Security Law Resource Center and also at Bloomberg Law.

Cybersecurity 40

Cybersecurity Data breaches Privacy Information Security 40

Adam Shostack

AUGUST 18, 2020

We can tell using surveys; using tools to see if threat models are similar across teams. There’s also a reality that some people come in with adjacent security knowledge, from which they can bridge to threat modeling. The security champs might need to know about that. And odds are that will be confusing.

Security 40

Security IT Education 40

Data Matters

OCTOBER 30, 2017

Responsibility for corporate cybersecurity extends from the chief information security officer’s office, to the C-suite, to the corporate boardroom. Cyber Security Beyond Cybersecurity: CLGAs. To be sure, expectations of director-level engagement in and responsibility for managing cyber risks are growing. 1] The U.S.

Compliance 60

Compliance Cybersecurity Risk Government 60

Hunton Privacy

MARCH 11, 2019

On the same date, some participating DPAs released the results of the Sweep exercise carried out in their respective jurisdiction. However, a number of organizations indicated that they have no processes in place to respond appropriately in the event of a data security incident.

Privacy 74

Privacy Data Privacy GDPR Personal data 74

Hunton Privacy

JULY 26, 2019

In terms of the legal basis for the data processing, the processing will most likely be legitimized by the data controller’s “legitimate interests” or under the “public task” basis (if the processing is necessary to perform a task carried out in the public interest or in the exercise of official authority).

GDPR 57

GDPR Personal data Privacy Compliance 57

IT Governance

FEBRUARY 15, 2019

That may sound daunting, but when cyber resilience is done right, your cyber security and incident response strategy will seem straightforward. Cyber resilience risk assessments cover everything associated with cyber security – i.e. the way you mitigate risks, meet regulatory requirements and deal with incidents that can’t be prevented.

Risk 83

Risk GDPR Communications Insurance 83

OneHub

MAY 7, 2021

Judging by the responses to a recent survey, these efforts haven’t been successful. Secure file storage and sharing are of the utmost importance. That means your business files need to be protected by high-level security protocols such as encryption, two-factor authentication, and granular access permissions.

Communications 52

Communications Access Encryption Authentication 52

eDiscovery Daily

NOVEMBER 26, 2017

While we were preparing to eat turkey and stuff ourselves with various goodies last week, the Cloud Security Alliance (CSA) provided an important guideline for compliance with the European Union General Data Protection Regulation (GDPR). Click here to access the CSA Code of Conduct for GDPR Compliance (after completing a short survey).

Cloud 40

Cloud GDPR Personal data Compliance 40

Cyber Info Veritas

JULY 19, 2018

This is according to a recent survey conducted by Soha Systems, and according to one of the speeches delivered by the Superintendent of the New York State Department of Financial Services, Mr. Benjamin Lawsky, “ A company’s cybersecurity is only as strong as the cybersecurity of its third-party vendors ”.

Risk 40

Risk Cybersecurity Compliance Data breaches 40

Hunton Privacy

FEBRUARY 24, 2020

The Guidance is open for consultation until April 1, 2020 and responses can be submitted via the ICO’s online survey. Part four covers how an organization can facilitate the exercise of individual rights in its AI systems, including rights related to solely automated decision-making.

Personal data 57

Personal data Artificial Intelligence Risk Privacy 57

CGI

OCTOBER 8, 2015

As part of the government’s traditional decision-making and budgeting framework, security threats are identified, assessed and prioritized, and budget resources are assigned accordingly to minimize the likelihood and impact of a breach. Develop an environment that responds and adapts to the constantly changing threat environment.

Risk 40

Risk Cybersecurity Information Security Government 40

Data Protection Report

JUNE 4, 2018

In addition to these high-profile examples, we are aware that a number of data controllers saw a marked increase in requests from employees and customers seeking to exercise their new rights last week. Also, almost half of the surveyed companies had at least 1,000 sensitive files open to all employees.

GDPR 40

GDPR Compliance Personal data Privacy 40

IGI

NOVEMBER 10, 2017

This correlates to a recognition by IG practitioners in the 2017 benchmark survey results that executive leadership will bear the brunt of the failure to adequately protect and ensure access to long-term business information. How is Digital Transformation (DX) impacting the need for digital preservation solutions?

Digital preservation 20

Digital preservation Government Digital transformation Access 20

Hunton Privacy

JANUARY 4, 2011

In certain circumstances, the term “means” may include technical as well as human intermediaries (for example, surveys and questionnaires). However, further harmonization of national laws, including of security requirements, would be necessary in order to avoid “forum shopping” issues.

Personal data 40

Personal data Cloud Privacy Security 40

ForAllSecure

AUGUST 27, 2019

Participants demonstrated autonomous application security by showing how systems can find vulnerabilities and self-heal from them. (In In later posts we will talk about network security.). DARPA’s purpose for this challenge was not to show an application or system is secure. Proving security is an academic exercise.

Security 52

Security Cybersecurity Libraries IT 52

IBM Big Data Hub

FEBRUARY 22, 2024

Artificial intelligence (AI) is transforming society, including the very character of national security. A recent IBM survey found that the top barriers preventing successful AI deployment include limited AI skills and expertise, data complexity, and ethical concerns. These are table stakes for the DoD or any government agency.

Artificial Intelligence 100

Artificial Intelligence Metadata Military Government 100

ForAllSecure

AUGUST 27, 2019

Participants demonstrated autonomous application security by showing how systems can find vulnerabilities and self-heal from them. (In In later posts we will talk about network security.). DARPA’s purpose for this challenge was not to show an application or system is secure. Proving security is an academic exercise.

Security 40

Security Cybersecurity Libraries IT 40

ForAllSecure

AUGUST 27, 2019

Participants demonstrated autonomous application security by showing how systems can find vulnerabilities and self-heal from them. (In In later posts we will talk about network security.). DARPA’s purpose for this challenge was not to show an application or system is secure. Proving security is an academic exercise.

Security 40

Security Cybersecurity Libraries IT 40

Troy Hunt

DECEMBER 19, 2017

Experian knows damn well that nobody is going to do that and it's merely a legal arse-covering exercise: "But Joe, you agreed to us selling your data before you did the search, why are you so upset that other companies now have your personal info?" A survey collects data which is then collated and reported on.

Data breaches 53

Data breaches Personal data GDPR Data collection 53

DLA Piper Privacy Matters

MARCH 4, 2021

Security vulnerabilities including hacking, unauthorised access, malware, phishing and ransomware attacks totalled 462 breach notifications. The DPC recommends that organisations: undertake periodic reviews of their IT security measures; implement a comprehensive training plan for employees; and. Enforcement.

GDPR 105

GDPR Compliance Data breaches Marketing 105

Data Protector

OCTOBER 11, 2017

Where the Information Commissioner gives notices to data controllers, she can now secure compliance, with the power to issue substantial administrative penalties of up to 4% of global turnover. How then will we secure adequacy without adhering to the charter? Where she finds criminality, she can prosecute.

GDPR 120

GDPR Personal data Government IT 120

eSecurity Planet

JUNE 20, 2023

After surveying trusted penetration testing sources and published pricing, the cost of a penetration test for the average organization is $18,300. Some sources claim that White Box testing is the least expensive test because penetration testing teams do not have to defeat network security defenses.

Compliance 98

Compliance Cloud Security Phishing 98

KnowBe4

APRIL 11, 2023

Share with friends, family and co-workers: [link] A Master Class on IT Security: Roger A. With 30+ years of experience as a computer security consultant, instructor, and award-winning author, Roger has dedicated his life to making sure you're prepared to defend against quickly-evolving IT security threats like ransomware.

Passwords 78

Passwords Phishing Ransomware Security awareness 78

Hunton Privacy

APRIL 30, 2019

According to a survey conducted in April for the CNIL, 62 percent of French people have heard about the GDPR and 70 percent say that they are more aware of the protection of their personal data compared to past years. The majority of those fines (seven fines) were imposed on companies following a personal data breach.

GDPR 48

GDPR Personal data Data breaches Marketing 48

Troy Hunt

MAY 2, 2018

Strictly speaking, I could have used a breach with hashed passwords and used the source Pwned Passwords as a dictionary in a hash cracking exercise, but plain text was always going to be much easier, much faster and would allow me to quickly see which password weren't already in my list.). records breached in November 2016.

Passwords 78

Passwords Data breaches Risk IT 78