Category Archives: 2019 legislative issue

Draft Data Security Standards are here. National Institute for Standards and Technology Delivers. 3 Key Points.

Input on Draft Standards:

Feedback and comments should be directed to cyberframework@nist.gov(link sends e-mail) by January 19th, 2018.

3 Goals of the draft standards is to align the needs of :

  • policy requirements
  • business needs
  • technological methodologies

Flexible Standards

The standards should eveolve as technology evolves

 

New buzz words are emerging in dagta security policy like: Cyber attack lifecycle

NIST | Cybersecurity Framework Draft Version 1.1

 

Regulatory Trend. Data Security in Medical Devices. Policymakers Requiring Disclosures. Coming to an health agency near you.

Who is making a request that medical device makers disclose component parts? House Committee on Energy and Commerce

On what agency are these policymakers making a request? Department of Health and Human Services

What is Department of Health and Human Services​ being asked to do?

  • Require medical device manfuacturers to dislcose:
    • bill of materials (BOM) for each piece of medical technology
    • describe the device’s components
    • describe software utilized
    • disclose any known risks…

Election Trend. Risk Limiting Audits for Elections. +1 More More State Adopts the Policy. Procurement & Legislation Required.

State: Colorado

What is risk limiting audit for elections? 

  • require all jurisdictions to have a sound ballot accounting process
  • require use a batch size of one ballot
  • require that a cast vote record exist and be available and retrievable for each individual ballot

How do risk limiting audits combat election hacking?

  • The number of ballots to select initially is calculated by using the risk limit and the margin of the contests
  • Ballots are next randomly selected
  • Each ballot’s vote…

Lege Trend. States Buying Cybersecurity Insurance.3 Bits informed:intel

  • Utah CIO say its expensive, a big budget item
    • $230,000 a year for $10 million in cyber coverage and has a $1 million deductible
  • 38% of state CIOs say their state has some sort of cyber insurance
  • Georgia has the largest amount of cyber coverage of any state
    • $100 million in coverage. $1.8 million-a-year premium & a $250,000 deductible per incident

Governing | Fearing Hackers, States Start Buying Cyber-Insurance + Insurance Journal

Lege Trend. OHIO Carrot and Stick in Data Security Bill for Businesses.

Ohio’s SB 220 sets up a benefit for businesses to comply: safe harbor from suit.

What’s required for a business to get the safe harbor? The business must  adopt “a written cybersecurity program that contains administrative, technical, and physical safeguards for the protection of personal information that complies with the NIST cybersecurity framework “

The Toledo Blade | Lawmakers offer legal carrot to defeat data breaches

OH SB 220 (2017)

 

Hawkeye Attorney General Reviewing State Cyber Security Policies and Laws as Part of Equifax Response.

The Iowa Attorney General is reviewing the state’s cyber security protocols to do 3 things:

  • identify shortfalls in current legal requirements for those who store personal information
  • look to enhance consumer protections
  • seek to lessen the burden on consumers who’ve been victimized by data breaches
    • Such as “scrutinizing the fees that credit reporting agencies are allowed to charge Iowans for freezing and unfreezing credit reports — particularly data breach victims,”

Des Moines…

6 Ways Sunshine State Moving Toward CyberSecurity Leader

Florida looks to be THE state for cybersecurity. Here’s what it is doing to get there:

  • Higher Education. 
    • Florida currently has 13 schools that the National Security Agency has designated as centers of academic excellence in cybersecurity education or research.
    • Florida universities and colleges offer  40 cybersecurity-related programs for graduate and undergraduate studies 
  • Workforce Pipeline.
    • ​The Florida Center for Cybersecurity helps universities & students
    • Shapes…