The National Cybersecurity Center of Excellence is soliciting comment on its guide to secure electronic health records on mobile devices.
NCCOE Draft Guide Comment is accepted until 9.25.15 here
Monthly Archives: July 2015
27 School Districts. Pilot Program. New National Student Data Security Standards.
“The Consortium for School Networking, will work toward establishing a nationwide set of standards around student privacy. The end result will be known as the Trusted Learning Environment Seal that public schools can adopt to assure the community that their student’s data is protected.”
5 Biggest Data Breaches of the Week: Retailers, Health Care, State Government
- Georgia Department of Human Services Division of Aging Services | Atlanta Business Chronicle
- Planned Parenthood | The Hill
- Online Photo Printing for a variety of retailers | WBOY 12
- Kansas Hospitals and Clinics that Use NOMoreClipboard software | KCUR
- US Census Bureau | Softpedia
Experian's Top 6 Data Security Trends- Credit Cards, Clouds, Health Care…
- Credit card breaches will rise over the next few months as hackers try to beat the October deadline set by Visa and MasterCard for merchants to accept only the new generation of credit cards that are embedded with computer chips.
- Hackers increasingly will target data stored in the cloud. “Hackers are eager to capitalize on the value of consumer online credentials,” according to the report.
- Expect more breaches of health care data. One reason: the growing number of access points to…
Trend: State Adds Data Security Requirements for State Contractors
Connecticut’s enacted Senate Bill 949 contains significant data security requirements for entities contracting with state agencies and entities in the health insurance and administration business.
Contracting entities must provide:
- Comprehensive data-security program, including:
- the use of security policies,
- annual reviews of such policies,
- access restrictions, and
- mandatory security awareness training for employees beginning July 1, 2015.
- Restrict access to Confidential…
New Student Data Security Bill. 4 Pts. Adds Cloud Computing to Student Data Controls.
A bipartisan duo of Congressmen and women (Congresspersons?) has a new student data security bill.
Reps. Todd Rokita (R-Ind.) and Marcia Fudge (D-Ohio) rolled out the Student Privacy Protection Act this week. It will:
- bar schools or private technology companies from selling or using student data for targeted ads.
- set minimum data security standards for companies handling sensitive student information
- update the Family Educational Rights and Privacy Act (FERPA) for mobile apps and cloud…
Procurement Process. Federal Data Breach.
The emergency contract for $20M was the tip of the ice berg. By August 14th. the federal government will award a 5 year contract for data security protection for the 21.5M federal employees whose data was hacked. Washington Post
Oh, and that pesky, initial contract of $20M isn’t going so well. The Austin, TX based vendor cannot keep up with demand. Washington Post
2/3 Health Care Organizations Had Significant Data Breach in Last Year
Health care orgnaizations are experiencing high levels of data breaches. A poll of health care data security experts list 2 challenges:
- shortages of cyber security experts in health care
- financial shortages for cyber security
Legal Trend: Cost of Monitoring is Damages for a Data Breach lawsuit
The Neiman Marcus data breach lawsuit can continue according to the 7th Circuit.
Courts have wrangled with whether a person who had her information stolen in a dat abreach must have had that information used in a manner to cause harm before a lawsuit can continue.
The 7th Circuit said no to that specific standard and is allowing more damages like the cost of credit monitoring.
Hacking a Car. Brakes Controlled by Hacker.
A reporter for Wired details what parts of a car hackers can control while you’re driving.
Hackers are able to control a vehicle’s:
- A/C system, changing the temperature in the car
- The radio, changing channels and volume control
- Windshield wipers
- Windshield washer fluid blurring the windows
- dashboard functions
- steering
- brakes
- transmission
All of the car functions above can be controlled from a laptop by a nefarious hacker. Wired. Congress is trying to stop it with the Spy Car Act.