- 6 candidates for U.S. House & Senate spent more than $1,000 on cybersecurity
- why? campaigning takes too much time to address cybersecurity issues ro raise funds for cyber security technology protections
- what do recent hacks look like?
- Senator McCaskill says her campaign was hacked
- Hacking in 2 California House races are being investigated by the FBI
- Silverlining: 2 major parties spend heavily on cyber security protections
Category Archives: 2019 legislative issue
50% of Voting Machines Hackable. New Report. What you need to know:
A Def Con report to Congress on Thursday will say:
- 50% of voting machines are hackable
- The defect is traceable back to a 2007 report by the OH Secretary of State
- The hacking can occur remotely or when the hacker has physical contact with the machine
WallStreet Journal | Voting Machine Used in Half of U.S. Is Vulnerable to Attack, Report Finds
Lege TREND. Centralize State Cybersecurity Decisions.
State: Pennsylvania
The legislation: HB32 (PA | 2018)
How is the centralization of data security decisions structured?
- create a Cybersecurity Innovation and Excellence Commission
- The Commission will be comprised of:
- lawmakers
- government officials such as:
- Department of Community and Economic Development
- Department of Labor and Industry
- Pennsylvania Emergency Management Agency
- outside experts
- The goal is to stay ahead of cybersecurity developments by:
- coordinate…
NY Attorney General Report on Crypto Currency Regulation. 3 Recommendations.
- Caution: Conflicts of Interest. Virtual asset trading platforms often engage in several lines of business that would be restricted or carefully monitored in a traditional trading environment.
- Account for Abusive Trading Behavior
- Consumer Protetctions needed
NY Attorney General | Virtual Markets Integrity Investigation
Lege TREND. State laws. Data Protection for Internet of Things.
California’s internet of things law, SB 327 (2018 | CA), is:
- first in the nation to address cyber security for internet of things
- internet of things- connected thermostats, coffee makers etc… that have been used to take down major websites
- it sets the floor for data security standards for connected devices
Concerns:
- Whether placing standards on ingternet of things harms innovation
Campaign Trend. Devices and Campaigns. What's preferred?
Campaign entity: The DNC
The data device policy: Eliminate Android, espcially ZTE devices. Retain iphones.
Is there a campaign officer for security? Yes, chief information security officer, the former chief information security officer at Yahoo
Forbes | Democrat Cyber Defenders Are Purging Androids In Favor Of iPhones
New Study. Center for Election Innovation & Research. 5 Take Aways.
Survey of states about voter registration database security reveals:
- STATES ARE IMPROVING AND IMPLEMENTING BEST PRACTICES
- multi factor identification for access is crucial
- system iuntegrity is crucial- staff and security
- consistent auditing of security systems
- train employees about phishing
Lege TREND. Scale Back Data Breach Notification Bills. Only Focus on Financial Sector. What you need to know.
Which groups don’t like the focus on the financial sector? Retailers, because it slows passage of across the board data breach notification statutes
What’s the purpsoe of focusing on the financial sector?
- Find a solution for the Equifax breach
What are state officials saying? “He has consistently opposed federal legislation that would pre-empt state attorneys general, as this proposal appears to do.” — CT Attorney General
Inside Cybersecurity | A debate unfolds over narrow breach-notice…
3 Reasons US Chamber Opposes State Data Privacy law. WHAT? WHY?
WHAT: The US Chamber of Commerce opposes California’s Consumer Privacy Act and wants the federal government to preempt state law
WHAT legislative specifics do they want?
- Preemption of state data protection laws
- Require concrete harm before a lawsuit
- Preclude all class action lawsuits
WHY?
- avoid a disparate patchwork of data privacy rules
- without preemption, companies have to choose the strictist law to comply with and that is California’s consumer privacy act
Fresh Regulatory & Legislative Issue: Cybersecurity & Aerospace
Congress, and thus soon the states, will openly consider regulatory and legislative measures for cybersecurity in aerospace including:
- aerospace equipment
- airport cybersecurity
- connected devices
Why should I care about this for my clients? Atlanta’s airport 2017 ransomware attack costs may be upward of $40 million in direct costs and loss of productivity