Procurement Opportunity State Employee Cyber Security Training

What are states doing to train their employees to protect data?

  • Michigan, Oklahoma and Wyoming encourage but don’t require training
  • Idaho Governor Excutive order requires training for all executive staff
  • Illinois in 2017 made cybersecurity training mandatory for state employees
  • Indiana’s CIO has authority to make training mandatory for state employees
  • Utah sends out phony phishing emaisl to state employees to test them
  • CT offers voluntary training every 2 months
  • Alabama offers daily…

Lege TREND. Refresher Insurance Data Security Bills.

SB273 (OH |2018) does the following:

  • Adopts the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law
  • OH becomes the 2nd state after South Caroline to adopt the model law
  • Requires licesees develop, implement, and maintain a comprehensive information security program that contains administrative, technical, and physical safeguards to protect nonpublic information and the licensee’s information system within 1 year of the effective date of the Act;
  • Perform…

New hacking target: Construction Equipment

Anatomy of a white hacker on construction equipment:

  • Accessed 14 construction locations
  • hacked into devices that not only controlled:
    • cranes
    • excavators
    • scrapers
    • other large machinery

The solution: Move equipment away from “esoteric custom protocols” and to “modern, standardized tech” that can be easily upgraded for security

Forbes | Exclusive: Hackers Take Control Of Giant Construction Cranes

3 Ways States Benefit from a State Data Officer.

 

  • data helps create more efficient permitting processes
    • CT allows local governments to get occupational licensing data directly form the state
  • overdose data helps first responders and hospitals prepare for epidemics
  • Prevent fraud 
    • IN adopted its Indiana’s Management and Performance Hub to “integrate” data from several agencies to build custom analytics solutions.” Its addressing issues from car crashes and infant mortality to Medicaid optimization.
    • TX shared data across agencies…

Lege TREND. Business Email Protections.

Why is statutorily protecting business email correspondence increasingly important to law makers?

Data.

What does the FBI data say about business email hacking?

  • 136% increase in identified global losses between December 2016 and May 2018
  • losses from business email total  $12.5 billio

Are there other terms I need to watch for in legislation/from clients?

  • cyber-enabled financial fraud

National Law Review | Privacy and Cybersecurity Issues to Watch in 2019

Attorney General. Data Broker Law. To write your states law with Business Guidance.

IN 2018, Vermont became the first state to regulate data brokers.

What is a data broker? 

  • A business that
  • knowingly collects and sells or licenses to third parties
  • brokered personal information of a consumer
  • with whom the business does not have a direct relationship

What business guidance did the Vermont Attorney General offer?

  • If Vermont courts do not have jurisdiction, then this law does not apply to a business
  • Does it establish an opt out requirement for consumers? no
  • Will businesses…

Legal TREND. Cities Suing Tech Companies Over Location Data Gathering.

Los Angeles City Attorney filed suit against the Weather Channel App for not properly disclosing that the app retains user location data.

Where would I see this in legislation? in fraud, deceptive trade practices, competititve practices, cybersecurity bills that protect geolocation

Engadget | LA sues Weather Channel app owner over ‘fraudulent’ data use