Author Archives: Tessa Zavala

WHO: Brennan Center for Justice WHAT: A Framework for Election Vendor Oversight WHY: 80% of voting systems controlled by 3 vendors little or no oversight of the security of these vendors RECOMMENDATIONS: New federal certification program to issue standards Enforce vendors’ compliance with the standards Institute mandatory compliance audits Utilize a Technical Guidelines Development Committee […]

Where do I see the proposal: Federal Register Request for Public Comments on a DRAFT NIH Policy for Data Management and Sharing and Supplemental DRAFT Guidance The goals: improve the current data management and sharing policy for NIH funded or conducted research (Bonjour, to all your medical research and pharmaceutical research clients) What best practices […]

WHO: The Chertoff Group + Dragos WHAT: A policy intelligence & communication shop + a industrial control system shop WHY: High Tech infrastructure is a data security target WHAT ARE INFRASTRUCTURE OPERATORS SAYING? Texas Central Rail: “As we usher in 21st century transportation solutions represented by high-speed rail, we believe that the safety of our […]

$1.6 million cost of federal fine to the state health agency 6,617 people had their personal health information accessible How did the data breach occur?   “an internal application was moved from a private, secure server to a public server, where a software flaw allowed the private information to be viewed without access credentials.” no risk […]

Who is calling for standard reporting? Harvard Business Review Why? The nature of attacks are borderless, fast moving and difficult to predict or manage What reasons support standard cyberattack reporting? Information Sharing. The wheel isn’t being recreated. Attackers will repeat methods. Certain Data will inform planning and defenses. this includes: dates relevant to the incident […]

Which regulatory agency is considering this?  United States’ Department of Health and Human Services What type of donations would be permitted? non-monetary exception to the regulatory Anti-Kickback Statute What do the rules look like? DHHS proposed cybersecurity donation rules Why is this critical? Interoperability and data sharing in healthcare makes an entire health care system […]

Where: Congress What is the legislation: Klobuchar, Peters, Johnson, Lankford Introduce Bipartisan Bill to Strengthen Cybersecurity for Local Governments What will it do? Require the Department of Homeland Security to provide resources and assistance to cities Provide cities with .gov domains administered by the federal government The Hill | Senators introduce bill to strengthen cybersecurity […]

Where: Massachusetts How much cybersecurity funding will Massachusetts offer schools? $250,000 to 94 municipalities and public school districts What will the grants fund? training 42,000 employees How does the funding flow? From the Governor’s Office, Executive Office of Technology Services and Security. Center for Digital Education | Massachusetts Announces School Grants for Cyber Training

States Considering bills like the California Consumer Privacy Act legislation: Massachusetts Minnesota Pennsylvania New Jersey New York States where legislation fell apart because of stakeholder disagreements in 2019: New York Washington state States where privacy legislation failed: Arizona Florida Kentucky Mississippi Montana States studying how to proceed: Connecticut Hawaii Louisiana Governing | Will More States […]

What private business entities are concerned by facial recognition regulation? Airports Council International – North America American Association of Airport Executives Consumer Technology Association Global Business Travel Association Identification Technology Association International Biometrics + Identity Association NetChoice Security Industry Association U.S. Chamber of Commerce Why are these business interests concerned about facial recognition tech regulation? […]