Category Archives: legislative trend

Lege Trend. Cyber Security + Fantasy Sports Regulations.

Massachusettes, home of the Draft Kings, passed new fantasy sports regulations.

The editorial board reactions: Fantasy Sports Regulations have no cybersecurity

The cybersecurity response from daily fantasy sports: 

  • fantasy sports regulations do require comapnies to have security measures
  • comapnies are subejct to prosecution for not following the regulations
  • the beauty of fantasy sports is that the playing information is public information

What cybersecurity experts say:

  • fantasy sports…

Business Trend: Encryption via Shredding Data. Cybersecurity Standards Need Flexibility.

 CryptoMove embraces a business model that replaces encryption with breaking data into pieces and moving it around. 

Instead of hackers having  way to your document in a garbage can, hackers have to reassemble microshredded pieces. 

Beware regulators who set a standard level of encryption as a requirement. The industry changes.

Tech Crunch | Security startup CryptoMove fragments data and moves it around to keep it secure

6 Crucial Elements of Cyber Security Legislation.

  1. Multidisciplinary application. Cybersecurity is not just for the Information Officer.
  2. Data is an asset. Protect it. Have a game plan for how long you’re keeping the asset.
  3. Data lives on mobile devices and moveable devices too. Protect those too.
  4. Know the information you keep.
  5. Train employees. Employees create cybersecurity breaches too.
  6. Legislative and regulatory data security standards are the floor, not the ceiling.

Tech Target | Six keys to creating strong data-security measures

TREND. Contracting Opportunity. Cybersecurity Validators.

The European Union Agency for Network and Information Security recommends  3rd party cybersecurity evaluations for self driving and connected cars. 

Why the need for 3rd parties? The current cybersecurity standards for vehicles is not enough.

Bonjour, new opportunities to provide cybersecurity evaluations…

The European Union Agency for Network and Information Security | Cyber Security and Resilience of smart cars

Empire Governor State Cyber Security Plan. 3 Point Plan.

New York Governor Andrew Cuomo set forth his plan for protecting the cybersecurity of New Yorkers by:

  • Creating a “response team” to handle confidential information breaches from state & local governments 
  • Create a graduated system of punishments for computer tampering crimes based on the amount of damage
  • More severe punishments for identity Theft

New York Law Journal | Cuomo Promises New Cybersecurity Measures in 2017

State Financial Data Security Rule Proposal Revision. 6 Key Pieces of Intel.

The state upping the ante on data security rules for the finance industry: New York

The new New York rules announced December 28th will:

  • Effective Date will be March 1, 2017 instead of January 1st
  • Require annual reporting to the state about data security compliance
  • Requires financial institutions to maintain comprehensive audit trails
  • Mandatory reporting of any cybersecurity event within 72 hours
  • Financial institutions must appoint a Chief Information Security Officer…

Data Breach Legislation & Regs. Carrot & the Stick. The Stats & The Regs.

What do you need to know about data breaches?

The carrot & the stick:

  • Increase the accountability of entities that hold data
  • By requiring the entities to shoulder more of the cost of a breach
  • Allow these entities to offer “credible security signals to the market” to provide a benefit to the entity

Tech Crunch | The carrot and stick of data breaches

Student Records Data Breach Prompts Legislation in Old Line State

The state: Maryland

The data breach: Student records, including names, brthdates and Social Security numbers in Frederick County Public Schools

Why legislation was triggered? 

  • A state senator didn’t think he was getting enough answers from education officials
  • An April 2015 audit called for increased data security measures for student data

The legislative proposal: 

  • Requiring up to 5 years of identity and credit monitoring for data breach victims
  • Not require schools to transfer…