IT Governance

MARCH 11, 2024

Source (New) Finance USA Yes 3,494 Woodruff Sawyer Source (New) Insurance USA Yes 3,087 Blackburn College Source (New) Education USA Yes 3,039 CAIRE Inc. Source (New) Professional services Netherlands Yes 28.3 Source (New) Transport USA Yes 3,815 Okta Source 1 ; source 2 (Update) Cyber security USA Yes 3,800 Shah Dixit & Associates, P.C.

Data Privacy 87

Data Privacy Privacy Security Data breaches 87

IT Governance

JANUARY 23, 2024

Australian government sets out risk-based system to respond to AI The Australian government has launched its plan to respond to the rise in AI, using a risk-based system to impose proportionate controls on its use. O’Hara & Sons, Inc.

Data Privacy 52

Data Privacy Privacy Manufacturing Retail 52

IT Governance

APRIL 22, 2024

million records from World-Check, a screening database used to screen potential customers for links to illegal activity and government sanctions. Under the proposed order, the company will be required to pay more than $7 million for violating its customers privacy rights. 7 million and restrict its use of sensitive data Cerebral, Inc.

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

Data Protection Report

MARCH 7, 2024

The proposed definition of “listed identifier” is Full or truncated government identification or account number (such as a Social Security Number, driver’s license or state identification number, passport number, or Alien Registration Number) [Note that this definition apparently includes truncated Social Security Numbers.]

Access 59

Access Military Compliance Personal data 59

Krebs on Security

DECEMBER 29, 2022

One of those is Mark Sokolovsky , a 26-year-old Ukrainian man who operated the popular “ Raccoon ” malware-as-a-service offering; Sokolovsky was busted in March after fleeing Ukraine’s mandatory military service orders. Twitter acknowledges that it was relieved of phone numbers and email addresses for 5.4 million users.

Passwords 236

Passwords Ransomware Computer and Electronics Encryption 236

eSecurity Planet

APRIL 26, 2024

Governance, risk, and compliance (GRC) management: Aligns security goals with business goals and regulatory requirements that apply to the data or the organization. Additional security layers implement effective controls and assure data confidentiality by adding additional insurance against breaches, zero day vulnerabilities, or tool failure.

Security 120

Security Cloud Cybersecurity Risk 120

Data Matters

APRIL 23, 2018

Increasingly, thought leaders, professional organizations, and government agencies are beginning to provide answers. Creating an enterprise-wide governance structure. More and more, directors are viewing cyber-risk under the broader umbrella of corporate strategy and searching for ways to help mitigate that risk. Principle 5.

Cybersecurity 60

Cybersecurity Risk Passwords Authentication 60

Hunton Privacy

APRIL 3, 2020

The Bill partially exempts entities subject to the Gramm-Leach-Bliley (“GLB”) Act or Health Insurance Portability and Accountability Act (“HIPAA”) from the notification requirements, but requires an entity subject to those laws’ breach notification requirements to also notify the D.C. Partial GLB/HIPAA Pre-Emption.

Data breaches 84

Data breaches Security Insurance Passwords 84