- Policies to improve data security workforce
- Liability policy for businesses that utilize 3rd parties to manage and mitigate security incidents and challenges
- Policies to encourage more women in data security workforce
- Liability and notification requirements when comapnies utilize automated security security tools
- Policies that Support Awareness and Training of existing workforce
- Policies that ecourage businesses to maintain a base level of data security and notification requirements
Category Archives: private corporations
Draft Data Standards from NISt + State Legislation = The Future of Data Security Legislation
Refreshing our recollection:
OHIO is considering SB 220 that ties the NIST standards to liability limitation. Yes, tort reform meets data security.
Draft Data Security Standards are here. National Institute for Standards and Technology Delivers. 3 Key Points.
Input on Draft Standards:
Feedback and comments should be directed to cyberframework@nist.gov(link sends e-mail) by January 19th, 2018.
3 Goals of the draft standards is to align the needs of :
- policy requirements
- business needs
- technological methodologies
Flexible Standards
The standards should eveolve as technology evolves
New buzz words are emerging in dagta security policy like: Cyber attack lifecycle
NIST | Cybersecurity Framework Draft Version 1.1
Lege Trend. Criminal Charges for Businesses that Hide Data Breaches.
U.S. Senator Bill Nelson’s S.2179 would trigger criminal charges if:
- its found that “intentionally and willfully conceals” a breach
- and, a person incurrs $1,000 in damages
The criminal charge comes with up to 5 years in prison and/or a fine.
6 Ways Sunshine State Moving Toward CyberSecurity Leader
Florida looks to be THE state for cybersecurity. Here’s what it is doing to get there:
- Higher Education.
- Florida currently has 13 schools that the National Security Agency has designated as centers of academic excellence in cybersecurity education or research.
- Florida universities and colleges offer 40 cybersecurity-related programs for graduate and undergraduate studies
- Workforce Pipeline.
- The Florida Center for Cybersecurity helps universities & students
- Shapes…
Lege Trend. Cyber Security & Public Information. This State Says Not Public Information.
Michigan Legislature is moving HB 4973 to prevent cybersecurity efforts from being dusclosued under public information act.
Support in the Michigan House: 101 to 5
The key bill text that exempts cybersecurity info from public information: prevents disclosure of information concerning the “confidentiality, integrity or availability of information systems.”
Potential policy benefit: the information protection could enecourage businesses to engagte in more information sharing on cyber…
Election Trend. Social Media Disclosures. Read the Bill.
A bipartisan bill in Congress seeks to require social media companies to disclose the same campaign related information that is required of radio and tv.
Which social media companies would be affected? websites, apps, search engines, social media and ad networks with over 50 million unique visitors
What would be trigger amount for dislcosures? if a person or entity spends at least $500 on political ads a year
What disclosures would be required?
- copies of ads
- information about groups…
12 TEXAS INTERIM CHARGES. DATA SECURITY. 1 Select Committee.
House Committee on Appropriations
#5 Trends in data security & cost savings Monitor the ongoing implementation of Article IX, Sec. 9.13 of the General Appropriations Act and determine if state agencies are realizing cost savings and/or security enhancements in state operations related to cybersecurity, information technology, and cloud computing. Study trends in cloud computing and IT delivery services, and identify whether additional cost efficiencies, economies of scale, or IT…
+2. Business Trend. More Tech Hiring New & More Government Affairs Consultants & Lobbyists.
TX House Interim Charge Request on Data Security for your Toll Tag.
Texas State Representatives Minajarez, Pickett, Dale, Oliverson & Goldman requested the following interim charge:
- Study what precautions toll road operators in Texas have in place to prevent cyber security threats, both internal and external.
The Minajarez, Pickett, Dale, Oliverson & Goldman letter to Speaker Straus dated 10.2.2017