Monthly Archives: August 2018

Campaign TREND. 2 Election Security Plans.

Campaign: For Massachusetts election official, the Secretary of State

The 2 competing election hacking plans:

  • Plan 1:
    • add 7-10 full-time cybersecurity specialists
    • create the Cybersecurity Operations Center
      •  operate on a 24/7 basis and monitor the office’s voting data
    •  risk-limiting audits to be conducted after all state and federal elections
  • Plan 2 from the 7 term incumbent
    • continue to only use paper ballots
    • store  voters’ personal information off the internet
    • exisiting IT…

Regulatory Trend. Cybersecurity Integration Center Alerts Agencies to Wildfires too. WHERE. WHAT. HOW.

WHERE: California

WHAT: The information sharing at the California Cybersecurity Integration Center alerted agencies along I-5 to a wildfire before the wildfire was phoned in

HOW: the Cybersecurity Inegration Center uses electronic scrapes of twitter, and a tweet started the wildfire information sharing through the agency

Cybersecurity Integration Center was created by Executive Order in 2015. 

Route 50 | How California Is Improving Cyber Threat Information Sharing

Health Care Data TREND. Governors Association Plan. 5 Steps.

  • 8 States collaborating with the Governors Association
    • Arkansas, Colorado, Delaware, Indiana, Iowa, Minnesota, Vermont and Washington
  • Establish best practices for health care data
  • Really long name:  “Harnessing the Power of Data to Achieve State Policy Goals: The Foundation for State Success in Improving Quality and Reducing Costs,”
  • 16 months 
  • Goals:
    • enable a fuller and better use of the countless health-care data streams they collect and maintain
    • legislative fixes
    • regulatory fixes

      • …

Lege Trend. An internet bill of rights? Hello all tech & telecom: this one is for you. Marketing and data limits.

Activists are promoting an Internet bIll of Rights, the kind of bill state legislatures love. What would it do?

  • Keeping your “browsing history” private
    • ​Except: fraud or potential crimes  
  • Full disclosure when being monitored, and the right to opt out
  • Preserving the privacy of your social media accounts.
  • Ownership of your personal, digital content
  • Notification of injurious data breaches
  • Fair play on social media platforms and/or internet providers
  • Protecting children on social media

    • …

Lege TREND. +1 State Blockchain Bill. Business Transactions. Contracting Procurement Changes. Read the Bill.

Ohio’s  SB 220 (2018 | OH), signed by the Governor, will establish these blockchain standards:

  • blockchain transactions are legitimized as enforceable electronic transactions
  • applies to electronic records using blockchain
  • applies to electornic signatures using blockchain
  • amends the definition of “electronic record” to include blockchain
  • amends the definition of “electronic signature” to include blockchain

SB 220 would apply to state contracting and state procurement.

 

Lege Trend. Liability Protection for Business Investment in Data Security. Read the Bill

Ohio’s  SB 220 (2018 | OH)

If a business’ cybersecurity procedures reasonably conform to any of these:

(a) The security requirements of the “Health Insurance Portability and Accountability Act of 1996,” as set forth in 45 CFR Part 164 Subpart C;

(b) Title V of the “Gramm-Leach-Bliley Act of 1999,” Public Law 106-102, as amended;
(c) The “Federal Information Security Modernization Act of 2014,” Public Law 113-283;
(d) The “Health Information Technology for Economic and Clinical Health Act,”…

Regulatory TREND. More Data Sharing Requirements. Cyber Threat Reporting. 3 Supporting Arguments

DOE Secretary Perry looks to DOUBLE the number of utilties sharing cyberthreat information.

Why?

  • Close collaboration between DOE and utiltiies helped thwart utilty cyber attacks last year
  • DOE is increasing its cyber security efforts
  • “We’re leading by example, by strengthening protection and response capabilities for our own power marketing administrations that fall under the DOE’s supervision,” Perry said.

FCW | DOE looks to double number of electric utilities sharing cyber threat data