Welcome to the Future!
Hacking incidents by industry:
34% of healthcare data breaches are caused by employee error
The average notification timeline after a breach:
Health IT Security | Healthcare Data Breaches Most Common in 2015…
Which state is making a new move to protect student data? Colorado
What does it mean for education contractors? New Rules. New Data Security Requirements.
3 Key prohibitions in the bill:
Chalkbeat…
Which state updated its data breach law in March to shorten the time line for notification? Tennessee
How long do Tennessee businesses with data breaches have for notification? 14 days from discovery or notification of the breach
Is there an exception to the 14 days? yes, a legitimate law enforcement need
Did Tennessee also expand what triggers a notification? Yes
What new event triggers a notification? When the breach is caused by your own employee
Which state passed new data security laws in 2016? Wyoming
Were the new laws the result of a breach or a legislative mandate? The result of a 2 year, 4-member Joint Task Force on Digital Information Privacy
What are agencies asked to do? 2 tasks
Where does procurement come into…
What entity released guidelines on teleworking and cyber security? The National Institute of Standards and Technology
What suggestions in the guidelines that will direct procurement opportunities?
virtual mobile infrastructure technologies
that create temporary, secure environments for teleworkers who need to access organizational data that are destroyed when the session is over
Krebs on Security | Hospital Declares ‘Internal State of Emergency’ After Ransomware Infection
KOAM 7 | AIA Statement on House Homeland Security Committee Hearing on the Role of Cyber Insurance
Why are wireless mice vulnerable to hacking? Unencrypted communication with computers is what guide the mice.
What does that mean? For $20, someone a block away can trick your computer into using its mouse and steal your data.
Why would regulators care? Because regulators stress encryption in data security.
Reuters | Wireless mice leave billions at risk of computer hack: cyber security firm
What entities are the new targets for data security enforcement? HIPPA adjacent health and wellness companies.
Why are HIPPA adjacent health and wellness companies the focus of regulators? These companies collect and store personal health information. For example:
The U.S. Justice Department arrested invididuals that attempted to break into a small dam to disrupt operations. The informed intel:
Washington Post | U.S. charges Iran-linked hackers with targeting banks, N.Y. dam