Train teachers in cybersecurity. Make data security part of the faculty and administrator school culture.
In 2013, 400 school data security bills were considered.
Only 1, Colorado’s, included teacher training.
Monthly Archives: January 2017
TREND. Contracting Opportunity. Cybersecurity Validators.
The European Union Agency for Network and Information Security recommends 3rd party cybersecurity evaluations for self driving and connected cars.
Why the need for 3rd parties? The current cybersecurity standards for vehicles is not enough.
Bonjour, new opportunities to provide cybersecurity evaluations…
Texas House Rules Debate + CyberSecurity.
Texas House Rules debate on Wednesday, January 11, 2017, added cybersecurity issues to the jurisdiction of the House Committee on Government Transparency and Operation.
2 Concerns. Local Governments Have about Federal Data Security Standards for Elections.
Local governments are concerned about federal DHS cybersecurity regulations for local elections, because those federal regulations may :
- Add an unnecessary layer of bureaucratic oversight
- Would centralize an inherently local — and decentralized — system
What did DHS do to trigger these concerns? Declared elections to be critical infrastructure, which triggers additional protections and resources from the federal government.
Governing | New Election Cyberprotections Cause Confusion and…
Empire Governor State Cyber Security Plan. 3 Point Plan.
New York Governor Andrew Cuomo set forth his plan for protecting the cybersecurity of New Yorkers by:
- Creating a “response team” to handle confidential information breaches from state & local governments
- Create a graduated system of punishments for computer tampering crimes based on the amount of damage
- More severe punishments for identity Theft
New York Law Journal | Cuomo Promises New Cybersecurity Measures in 2017
TREND. 5 Most Common Changes to State Laws Protecting Personal Information
States are changing their cybersecurity statutes to include as protected information:
- usernames
- email addresses
- passwords
- security questions
- security answers
New Regulations. Medical Device Hacking.
What entity promulgated new medical device cybersecurity rule guidance? The FDA
What prompted the new guidance? Claims of heart device hacking
Policy Issues around medical device hacking:
- assess whether the risk of patient harm is sufficiently controlled or uncontrolled
- protection of PHI- protected health information- by devices
- comprehensive risk management programs
- NIST cybersecurity protocols should be the standard
Medical Marijuana Data Breach Leads to Offline State Records.
Where did the data breach occur? State of Nevada medical marijuana database
How many people had personally identifiable records affected? more than 11,000, but no patient records
The response by the state: Take the database offline
Weed News | Nevada Medical Marijuana Data Breach Highlights Need For Industry Information Security
Reno Gazette Journal | Thousands of Nevada medical marijuana dispensary applications exposed online
2016. The largest health care data breach. What you need to know.
- 3.7 million patients and customers affected
- Phoenix, AZ
- Banner Health
- Hackers accessed credit card processing information + patient data information
Beckers Health IT & CIO Review | 11 of the biggest healthcare data breaches of 2016
State Financial Data Security Rule Proposal Revision. 6 Key Pieces of Intel.
The state upping the ante on data security rules for the finance industry: New York
The new New York rules announced December 28th will:
- Effective Date will be March 1, 2017 instead of January 1st
- Require annual reporting to the state about data security compliance
- Requires financial institutions to maintain comprehensive audit trails
- Mandatory reporting of any cybersecurity event within 72 hours
- Financial institutions must appoint a Chief Information Security Officer…