Category Archives: regulatory enforcement

Anatomy of a East Coast Governor's Cybersecurity Team

Vermont Governor Phil Scott named these new members to his Cybersecurity Team:

  • Chief Security Officer at the UVM Medical Center
  • President of Norwich University’s Applied Research Institutes
  • Computer & Digital Forensics professor at Champlain College

4 Goals of the Cybersecurity Team:

  • Assess the state’s cybersecurity status.
  • Develop a plan to protect public and private sector information systems
  • Evaluate readiness
  • Strengthen safeguards

WAMC | Vermont Governor Names New Members To…

Lege Trend: Cyber Security State Volunteer Corps. Read the Bill.

State : Michigan

When did Michigan create its Cyber Security Volunteer Corps?  2013 under the Michigan Department of Technology, Management, and Budget

What did the 2017 amendment do? Michigan’s HB 4508  codifies the Corps and permits volunteers to bring cyber-defense services to nonprofit organizations, private businesses, educational groups, and other non-governmental associations.

What is required of volunteers?  Volunteers must undergo criminal background and FBI checks

Is there…

Lege Trend. Ports and Cyber security. 2 Key Points. Read the Bill.

Congress’ Strengthening Cybersecurity Information Sharing and Coordination in Our Ports Act will:

  • Require a maritime representative on the nation’s information sharing hub for critical infrastructure cyber threats run by Department of Homeland Security
  • Require Department of Homeland Security to improve cyber information sharing and coordination at U.S. ports

U.S. H.R. 3101 | Strengthening Cybersecurity Information Sharing and Coordination in Our Ports Act

The Hill | House passes bill to…

+1 Nutmeg State. Cyber Security Task Force are en vogue with State Leaders & Law Enforcement

Connecticut is creating the Connecticut Cyber Task Force.

The Connecticut Cyber Task Force will consist of:

  • a mix of Local, state and federal law enforcement agencies:
    • FBI
    • Drug Enforcement Administration
    • U.S. Secret Service
    • U.S. Postal Inspection Service
    • Homeland Security Investigations
    • Internal Revenue Service – Criminal Investigation
    • Defense Criminal Investigative Service
    • Connecticut State Police
    • 11 police departments from across the state, including the Bridgeport,…

12 TEXAS INTERIM CHARGES. DATA SECURITY. 1 Select Committee.

House Committee on Appropriations 

#5  Trends in data security & cost savings Monitor the ongoing implementation of Article IX, Sec. 9.13 of the General Appropriations Act and determine if state agencies are realizing cost savings and/or security enhancements in state operations related to cybersecurity, information technology, and cloud computing. Study trends in cloud computing and IT delivery services, and identify whether additional cost efficiencies, economies of scale, or IT…

State Regulator Subpoenas Company After Data Breach. What your Clients Need to Know.

The State:  New York

The regulator:  New York’s Department of Financial Services

The Subpoena: Seeks more information about Equifax’s data breach, including:

  • details on when Equifax learned of the breach
  • details on what actions Equifax took after the breach was discovered

More regulatory enforcement in the works? Yes, New York also wants to impose the financial data security rules it finalized this year to apply to credit reporting agencies like Equifax.

What does this mean for other…

+1 State Bill. Equifax Reaction from Bluegrass Country. Procurement Opportunities + New Encryption Standards.

Kentucky Attorney General proposes revisions to the state’s data breach notification statute to require:

  • Kentuckians impacted by a data breach would gain access to a free credit freeze
  • Require access to 3 free credit reports each year from each of the major credit reporting agencies
  • Require 5 years of credit monitoring
  • Require all credit reports be encrypted

WCPO | Kentucky’s attorney general proposes new data breach protections after Equifax incident

+1 State Lege Acts in Response to Equifax. Read the Bill. 3 Points from the A.G.'s Supporting Op-Ed.

New York State Assembly is pursuing SB06880 to require a consumer to be notified of a breach within 15 days of discovering the breach.New York SB 06880 (2017)

Supporting changes to New York’s Data Security and Notification Act, the state Attorney General states:

  • Expect more from companies entrusted with your data
  • All companies need reasonable security measures for their scale of company and type of business (what’s good for Equifax isn’t good for the Zavala Patisserie)
  • Private information…