Category Archives: government data breach

Anatomy ot the Saguaro Cactus State & Local Cybersecurity Team. Membership + 3 Goals. Build Your Own State Team via Executive Order.

Arizona Governor Ducey by Executive Order created the Arizona Cybersecurity Team (ACT).

ACT team membership: experts from state, local, and federal government, the private sector, and higher education

ACT Goals:

  • enhancing cybersecurity workforce development and education
  • increasing public awareness on cybersecurity best practices
  •  advise and provide recommendations to the governor

The ACT primer cites 4 data breaches to support its mission:

  • Texas Comptroller Data Breach
  • Utah Health Care…

Business TREND. TRUST CHARTER to partner Business & Government in Data Security. 8 partners. 2 fundamentals.

The 8 partners in the TRUST CHARTER:

  • Siemens
  • Munich Security Conference
  • Airbus
  • Allianz
  • Daimler Group
  • IBM
  • NXP
  • SGS
  • Deutsche Telekom

Action Areas for Business and Government:

  • A call to responsibility at the highest levels of government and business with a dedicated government section and chief information officer at organizations
  • Companies must develop mandatory, third-party certification for infrastructure and solutions

“Governments must take a leadership role when it comes to the…

Lege Trend. Procurement Opportunity. Gulf State Looks to Secure Business Contracts via Blockchain Legislation. Read the Bill.

Florida legislature is considering House Bill 1357 that will :

  • look to transition state data centers to blockchain technology
  • provides for electronic contracts and signatures secured by blockchain technology

 

As a side note, Arizona passed a similar bill in 2017. AZ HB 2417 (2017)

CoinDesk | Florida Bill Would Legally Recognize Blockchain Signatures, Smart Contracts

Lege Trend. BLOCKCHAIN meets Legislature. The Future of Data Security Legislation? Read the Bill.

Colorado Legislature is considering SB18-086 that brings together blockchain & data security legislation.

What you need to know:

  • Calls for CO to adopt a distributed ledger
    • this means pieces of the ledger live in different cyber spaces, so a hack of 1 space does not expose all the data
  • How does the bill get to a distributed ledger in Colorado state government?
    • Directs Colorado’s chief information security officer to evaluate the costs and benefits of using distributed ledgers in various…

Lege TREND. 6 Standard Data Protocol For all State Data. Is the South leading the way in protecting personal information?

Mississippi is considering statewide standards for data that will:

  • how to long to store personal data
  • how to dispose of personal data
  • what personal data can be disposed of
  • how to store personal data
  • apply to all state entities that have personal data in their possession
  • what a state agency, Department of Archives and History, needs to store data in perpetuity

What prompted this legislative action by Mississippi?

  • A 2013 breach of health care data at the Univeristy of Mississippi
  • A…

Draft Data Security Standards are here. National Institute for Standards and Technology Delivers. 3 Key Points.

Input on Draft Standards:

Feedback and comments should be directed to cyberframework@nist.gov(link sends e-mail) by January 19th, 2018.

3 Goals of the draft standards is to align the needs of :

  • policy requirements
  • business needs
  • technological methodologies

Flexible Standards

The standards should eveolve as technology evolves

 

New buzz words are emerging in dagta security policy like: Cyber attack lifecycle

NIST | Cybersecurity Framework Draft Version 1.1

 

Anatomy of a East Coast Governor's Cybersecurity Team

Vermont Governor Phil Scott named these new members to his Cybersecurity Team:

  • Chief Security Officer at the UVM Medical Center
  • President of Norwich University’s Applied Research Institutes
  • Computer & Digital Forensics professor at Champlain College

4 Goals of the Cybersecurity Team:

  • Assess the state’s cybersecurity status.
  • Develop a plan to protect public and private sector information systems
  • Evaluate readiness
  • Strengthen safeguards

WAMC | Vermont Governor Names New Members To…

Lege Trend. States Buying Cybersecurity Insurance.3 Bits informed:intel

  • Utah CIO say its expensive, a big budget item
    • $230,000 a year for $10 million in cyber coverage and has a $1 million deductible
  • 38% of state CIOs say their state has some sort of cyber insurance
  • Georgia has the largest amount of cyber coverage of any state
    • $100 million in coverage. $1.8 million-a-year premium & a $250,000 deductible per incident

Governing | Fearing Hackers, States Start Buying Cyber-Insurance + Insurance Journal

12 TEXAS INTERIM CHARGES. DATA SECURITY. 1 Select Committee.

House Committee on Appropriations 

#5  Trends in data security & cost savings Monitor the ongoing implementation of Article IX, Sec. 9.13 of the General Appropriations Act and determine if state agencies are realizing cost savings and/or security enhancements in state operations related to cybersecurity, information technology, and cloud computing. Study trends in cloud computing and IT delivery services, and identify whether additional cost efficiencies, economies of scale, or IT…