September 2016 – Page 2 – InfoHive

New Kid on the Block. Vendor Security Alliance . What you Need to Know.

Alliance members include: Uber, Airbnb, Atlassian, Docker, Dropbox, GoDaddy, Palantir, Square, and Twitter

Goal of the Alliance: “streamline the vetting process that businesses use for evaluating vendors’ cybersecurity risks”

October 1st unvieling: security and compliance questionnaire to benchmark vendor risks

SC Magazine | Uber, Airbnb, Dropbox, and others form coalition to evaluate vendor cyber risks

3 Concerns about Data Security in Energy Sector

A recent Tripwire survey of energy cybersecurity experts reveals:

Most energy security experts don’t know what would happen if their systems were breached
Only 59% know how long it would take to find a hacker on their system
73% believe they could detect unauthorized intrustions in their network

SC Magazine | Energy sector cybersecurity workers overconfident in their capabilities

Legal Trend. Regulatory Trend. Settling with Companies that Gather Data about Kids.

The State: New York

NY Settled a suit with Hasbro, JumpStart Games, Mattel & Viacom for violating what law? The federal Children’s Online Privacy Protection Act

What did the companies do? Gather personal data about children under 13

The settlement: collective $835,000 in penalties plus regular reporting to New York regulators

Engadget | Websites settle with New York over online child tracking

Reg. Trends. Gov. & Banking Regulator. State Banking Cyber Security Requirements.

Which state? New York

Which state officials are proposing cyber security regulations for banks/financial institutions? Governor Cuomo & New York State top banking regulator.

What will be required of financial institutions under these state data security regulations?

Required to hire a chief information security officer
Must implement measures that detect and deter cyber intrusions
Must meet consumer protection standards, with companies able to assess their own needs and adopt…

Legal Trend. Credit Union Class Action After Retail Data Breach.

Where is this happening? Oregon courts

What is the complaint by the credit union and the other financial institutions in the class action?

A restaurant chain failed to implement or maintain adequate data security measures for customer information
This caused the credit union to pay:
- fraudulent charges
- replace cards
- stop payments
- block transactions
- and other costs

SC Magazine | Oregon credit union sues Noodles & Company over breach

4 Recommendations for Protecting Student Data. Pay to Arm Yourself with IT Information. Stop being stingy.

Who is recommending student data protections? A report from new report on data privacy from the Southern Regional Education Board

What are the 4 recommendations?

Clear & transparent state data governance policies. Make the policies easy to find for parents.
- Print the policies out and pin them to parents at orientation
Fund & improve student data security
- Stop being so stingy
Train the people who handle student data
- Teach the teachers
Fund IT support at schools
- Again, stop…