Category Archives: government data breach

6 Crucial Elements of Cyber Security Legislation.

  1. Multidisciplinary application. Cybersecurity is not just for the Information Officer.
  2. Data is an asset. Protect it. Have a game plan for how long you’re keeping the asset.
  3. Data lives on mobile devices and moveable devices too. Protect those too.
  4. Know the information you keep.
  5. Train employees. Employees create cybersecurity breaches too.
  6. Legislative and regulatory data security standards are the floor, not the ceiling.

Tech Target | Six keys to creating strong data-security measures

Empire Governor State Cyber Security Plan. 3 Point Plan.

New York Governor Andrew Cuomo set forth his plan for protecting the cybersecurity of New Yorkers by:

  • Creating a “response team” to handle confidential information breaches from state & local governments 
  • Create a graduated system of punishments for computer tampering crimes based on the amount of damage
  • More severe punishments for identity Theft

New York Law Journal | Cuomo Promises New Cybersecurity Measures in 2017

Medical Marijuana Data Breach Leads to Offline State Records.

Where did the data breach occur? State of Nevada medical marijuana database

How many people had personally identifiable records affected? more than 11,000, but no patient records

The response by the state: Take the database offline

Weed News | Nevada Medical Marijuana Data Breach Highlights Need For Industry Information Security

Reno Gazette Journal | Thousands of Nevada medical marijuana dispensary applications exposed online

1 Byte. Why Data Security Extends Beyond Computers.

The U.S. Air Force forewarns that data security is more than computers. Its networked mechanics and platforms.

There’s even handy jargon sure to catch on- operationalize cyber security.

Sound familiar? Sounds likeutilize medical equipment that transmits information, or dolls that contain information about children, or your Fitbit.

Defense Systems | Air Force: Cyber security extends beyond IT

Procurement Opportunities. 3 Data Security Recommendations. Senate Business and Commerce.

Senate Business & Commerce interim report offers these recommendations on cybersecurity:

  • the voluntary nature of state cybersecurity policies are a problem (i.e. need more requirements with hint, hint: more procurement opportunities)
  • require technical risk assessments at state agencies
  • USE PRIVATE SECTOR TECHNOLOGIES like cloud storage

A plethora of procurement opportunities abound.

Data Breach. Government Car Fleets.

The National Association of Fleet Administrators issued a white paper making these recommendations for fleets:

  • Address the most significant data threat, fleet telematics systems
    • tracking and wirelessly communicating the location, movement, behavior and health of a vehicle in real time make the system subject to hacking
  • Highlights Chesterfield County, Virginia, which prohibits bluetooth in fleet vehicles to minimize hacking potential
  • Establish communication protocols to exchange…

TREND. Legislation. Curb Election Hacking. 4 Pieces Informed Intel

Legislation aimed at curtailing election machine hacking would:

  • require electronic machines to generate a paper trail
  • declare voting systems to be critical infrastructure
  • establish security standards
  • establish protocols for security failures

H.R. 6072 by Congressman  Johnson (D-GA)

SC Magazine | Rep. Johnson introduces bill designed to deter electoral hacking

 

Lege Trend: Agency Data Breach Means Agency Head Rolls.

The legislation: Cybersecurity Responsibility and Accountability Act of 2016 by Rep. Ralph Abraham, R-La.

What does it do?

  • If an agency has a data breach
  • Cause in whole or in part by the agency’s failing
  • (Cue eery music) The head of the agency gets das boot
  • Also prohibits agency head from getting “any cash or pay awards or bonuses for a period of one year” after a data breach

NEXTGOV | CYBER BILL WOULD LET AGENCY HEADS BE FIRED IF THERE’S A DATA BREACH