3 Points Informed Intel. Why Hackers Target Healthcare Over All Other Industries.

Hacking incidents by industry:

  • 23% of data breaches occured in healthcare
  • 18% of data breaches occured in financial services
  • 16% of data breaches occured in education

34% of healthcare data breaches are caused by employee error

The average notification timeline after a breach:

  • 69 days to detect the incident
  • 7 days to contain it
  • 43 days to analyze what happened
  • 40 days to notify potentially affected individuals

Health IT Security | Healthcare Data Breaches Most Common in 2015…

INTERIM. 3 Ways 1 State Seeks to Tighten Education Contracts. Student Data Security. Read the Bill. Prepare an Offense. Prepare a Defense.

Which state is making a new move to protect student data? Colorado

What does it mean for education contractors? New Rules. New Data Security Requirements.

3 Key prohibitions in the bill:

  • prohibit education contractors from selling personally identifiable student information
  • prohibit use of student information for targeted advertising to students
  • Prohibitions follow to the subcontractors
  • Establishes data security protocols tied to education contractors

CO HB 16-1423

Chalkbeat…

Lege Trend: Shorten Notification Requirements for Business with Data Breaches.

Which state updated its data breach law in March to shorten the time line for notification? Tennessee

How long do Tennessee businesses with data breaches have for notification? 14 days from discovery or notification of the breach

Is there an exception to the 14 days? yes, a legitimate law enforcement need

Did Tennessee also expand what triggers a notification? Yes

What new event triggers a notification? When the breach is caused by your own employee

TN SB 2005

JD Supra | Alston &…

Lege Trend: Reworking Agency Data Security. Procurement. Procurement. Procurement.

Which state passed new data security laws in 2016? Wyoming

Were the new laws the result of a breach or a legislative mandate? The result of a 2 year,  4-member Joint Task Force on Digital Information Privacy

What are agencies asked to do?  2 tasks

  • Agencies must review their data collection, handling, security and management.
  • Agencies must assess their stored data and explain why it collected it; and whether it really still needs to be stored

Where does procurement come into…

INTERIM. 2 Points Informed Intel. Regulatory Guidance for Data Security while Government Teleworking. Contracting Opportunities.

What entity released guidelines on teleworking and cyber security? The National Institute of Standards and Technology

What suggestions in the guidelines that will direct procurement opportunities?

  • virtual mobile infrastructure technologies

    • that create temporary, secure environments for teleworkers who need to access organizational data that are destroyed when the session is over

  • mobile device management technology
    • technology to force devices to adhere to certain security…

INTERIM & TREND: Data Ransom. Newest Target: Local Governmental Entities & Private Sector. 5 Bits Informed Intel.

What local governmental entity department was the newest target to hackers holding data for ransom? Durham, N.H., Police Department

How did the hackers do it? Attached a file to a email on a relevant police investigation that appeared to be fax file.

What did the police department do? Pay the ransom? Beat the ransom technology? The police department mitigated damage by recovering the locked files from a backup copy that hadn’t been infected. The department paid no ransom.

Is this…

INTERIM. More Data Security Warnings for Energy Infrastructure

Who is issuing the warning? The Obama Adminsitration

What entities are being warned about data security threats?

  • power companies
  • water suppliers
  • transportation networks

What’s sparked the warning? The attack n the Ukraine’s power grid 2 months ago. It was the first cyberattack that produced a wide spread blackout

What was the target of the cyber attack? industrial control systems that act as the intermediary between computers and the switches

What could hackers do with control…

INTERIM. Lege TREND: National Commission on Security and Technology Challenges. 3 Bits Informed Intel.

Data security and new government agency leadership posts and new agencies go hand in hand. 

Pending federal legislation would create the National Commission on Security and Technology Challenges.

Here’s the info you need abou the National Commission on Security and Technology Challenges:

  • its bipartisan: Senate Intelligence Committee member Sen. Mark R. Warner (D-Va.) & House Homeland Security Committee Chairman Michael McCaul (R-Tex.)
  • required new agency report detailing:
    • benefits…