Author Archives: admin

Data Security Legislation is a Driver to Increase Data Security Insurance.

Progressive Market’s analysis lists 3 drivers for an increased demand in cyber insurace/data security insurance including:

Draft Data Security Standards are here. National Institute for Standards and Technology Delivers. 3 Key Points.

Input on Draft Standards:

Feedback and comments should be directed to cyberframework@nist.gov(link sends e-mail) by January 19th, 2018.

3 Goals of the draft standards is to align the needs of :

  • policy requirements
  • business needs
  • technological methodologies

Flexible Standards

The standards should eveolve as technology evolves

 

New buzz words are emerging in dagta security policy like: Cyber attack lifecycle

NIST | Cybersecurity Framework Draft Version 1.1

 

Business TREND. Health Care & Cybersecurity. By the Numbers.

A new report by the Center for Connected Medicine found that data security leads th eminds of health care businesses:

  • 9 of 10 health care companies will spend more on data security in 2018
  • 54% want to better identify threats
  • 50% want to better detect threats
  • 50% want to better protect against cyber threats
  • Less than 20% are focused on recover and respond technologies

Would health care providers pay cybercriminals?

  • 17% said yes
  • 17% were undecided
  • 22% didn’t know
  • 44% said no

Healt…

Lege Trend. 3 Points from a Student Data Security Notification Bill in the Midwest.

Missouri will be considering  SB582 (2018) about student data breach notification. 

SB582 requires notification of a student data breach to 3 parties:

  • the student’s parent(s) or legal guardian(s)
  • the department of elementary and secondary education
  • the state auditor 

Lee’s Summit Tribune | Auditor Galloway announces legislation to require schools to notify parents in case of cyber security breach

Regulatory Trend. Data Security in Medical Devices. Policymakers Requiring Disclosures. Coming to an health agency near you.

Who is making a request that medical device makers disclose component parts? House Committee on Energy and Commerce

On what agency are these policymakers making a request? Department of Health and Human Services

What is Department of Health and Human Services​ being asked to do?

  • Require medical device manfuacturers to dislcose:
    • bill of materials (BOM) for each piece of medical technology
    • describe the device’s components
    • describe software utilized
    • disclose any known risks…

Anatomy of a East Coast Governor's Cybersecurity Team

Vermont Governor Phil Scott named these new members to his Cybersecurity Team:

  • Chief Security Officer at the UVM Medical Center
  • President of Norwich University’s Applied Research Institutes
  • Computer & Digital Forensics professor at Champlain College

4 Goals of the Cybersecurity Team:

  • Assess the state’s cybersecurity status.
  • Develop a plan to protect public and private sector information systems
  • Evaluate readiness
  • Strengthen safeguards

WAMC | Vermont Governor Names New Members To…

1st ever US hacker attack on Local Transit System. 3 Lessons for other cities.

The transportation system: Sacramento Regional Transit

The hack: destroyed internal systems data, but no data was stolen. It was a ransomware hack with a 1 bitcoin ransom

The recovered data: 80% via backup data

Impact on transportation systems: Train and bus service was not affected

Governing | Hackers Attack Transit System in California’s Capital