Category Archives: regulatory enforcement

SEC Warns Cyber Defenses Do Not Pass Muster. 3 Bits informed:intel

The Securities Exchange Commission has issued a warning investment advisers that they need to be more proactive in data security by:

  • conduct continuous cyber-risk assessments
  • performing penetration or venerability tests
  • 26% of advisers and funds examined failed to conduct periodic risk assessments of critical systems to identify cyber security threats, vulnerabilities, and the potential business consequences.

Reuters | SEC identifies adviser cyber security flaws

Reuters | Exclusive: New SEC…

Lege TREND. Office of Cyber Defense Coordination. 4 Bits informed:intel

The State Legislature that created the Office of Cyber Defense Coordination​: Nevada

Within which state agency will the Office live? Nevada’s Department of Public Safety

The Legislation creating the office: Nevada’s AB 471 (2017)

What do these cyber offices look like in other states?

Lege Trend. Hack Back Bills. 4 Ways one Hack Back Bills is Changing.

Amendments to Congressman Tom Graves’ Active Cyber Defense Certainty Act include:

  • mandatory reporting requirement for entities that use active-defense technique
  • the reporting to federal law enforcement will ensure such tools are used responsibly
  • 2 year sunset clause
  • exemption allowing people or companies to recover their lost data if it’s found using defensive techniques and can be grabbed back without destroying other data.

Politico Morning Cyber Security | Scoop: ‘Hack back’ bill gets…

Lege Trend. Link Licensing to Data Security Standards.

Legislative body is located where? Australia

What triggers licensing issues when failing to meet data security standards? 

  • Licensing enforcement is triggered only for companies valued at greater than $3 million in revenue

The goal: Move data security to the forefront with business leadership

Intelligent Insurer | New data breach reporting legislation deemed cyber game changer in Australia

Local Trend: City Writes Broadband Ordinance.4 Requirements on Cable Operators.

City: Seattle

Seattle’s Broadband Ordinance requires:

  • ​requires Cable Operators to obtain opt-in consent before sharing a customer’s web browsing history
  • Requires Cable Operators to obtain opt-in consent before they use customer web browsing history
  • The exception: unless it is necessary to render a service ordered by the customer or pursuant to a subpoena or valid court order authorizing disclosure, or to a governmental entity.
  • Cable operators must attest to compliance with this rule by…

Legal Trend. New FBI Guidelines. Healthcare. Cybersecurity.

What guidance is the FBI giving medical and dental providers on cybersecurity? That file transfer protocols, FTP, transfers csn be accessed by anonymous users without passwords. Cyber secuity measures should be taken to correct server settings.

What speficially did the FBI say about protected health information (PHI) pr personally identifiable information (PII) ? PHI & PII should not be kept on FTP servers allowing for anonymous operation

National Law Review | New FBI Warning for Healthcare…

Lege Trend. There is No Place Like Home. There is No Place Like Home. Home has a new Executive Cybersecurity Agency.

State: Kansas

Details of the new Kansas agency on cybersecurity:

  •  centralizing cybersecurity operations of state government within a new Cabinet-level agency
    • Kansas Information Technology Enterprise Agency.
  • $10 M in annual funding just to combat hackers
  • Exempts:
    • Elected state officials
    • Board of Regents’ at Kansas’ colleges and universities
    • Will exempt pension systems based on federal investment standards

Kansas House Bills 2331 and 2359 (2017)

Hutchinson News | In effort to shore…

3 Goals of the Peach State's Cyber Innovation Center

Goals of Georgia’s Cyber Innovation Center:

  • bring together government, universities and the private sector to develop and practice protocols that will mitigate attacks
  • protect  Georgia’s citizens, businesses and institutions
  • give Georgia’s technology economy a boost

Georgia’s Investment in the Cyber Innovation Center:

  • Millions in state funds
  • 15,000 sq.ft. facility to be an incubator for startup cybersecurity companies

State Tech Magazine | Q&A: Georgia CIO Calvin Rhodes on Launching a…

Smart Card Alliance is now the Secure Technology Alliance. 5 Goals

  • Influencing standards and best practices that are relevant to the understanding, adoption and widespread application of secure solutions, including smart cards, embedded chip technology, and related hardware and software
  • Serving as an educational resource to its members and industry stakeholders implementing secure solutions
  • Providing a forum for cutting-edge discussions and projects on issues surrounding the implementation of secure solutions
  • Maintaining a voice in public policy that…