Category Archives: regulatory trend

Regulatory Trend. Data Security in Medical Devices. Policymakers Requiring Disclosures. Coming to an health agency near you.

Who is making a request that medical device makers disclose component parts? House Committee on Energy and Commerce

On what agency are these policymakers making a request? Department of Health and Human Services

What is Department of Health and Human Services​ being asked to do?

  • Require medical device manfuacturers to dislcose:
    • bill of materials (BOM) for each piece of medical technology
    • describe the device’s components
    • describe software utilized
    • disclose any known risks…

Anatomy of a East Coast Governor's Cybersecurity Team

Vermont Governor Phil Scott named these new members to his Cybersecurity Team:

  • Chief Security Officer at the UVM Medical Center
  • President of Norwich University’s Applied Research Institutes
  • Computer & Digital Forensics professor at Champlain College

4 Goals of the Cybersecurity Team:

  • Assess the state’s cybersecurity status.
  • Develop a plan to protect public and private sector information systems
  • Evaluate readiness
  • Strengthen safeguards

WAMC | Vermont Governor Names New Members To…

Lege Trend. States Buying Cybersecurity Insurance.3 Bits informed:intel

  • Utah CIO say its expensive, a big budget item
    • $230,000 a year for $10 million in cyber coverage and has a $1 million deductible
  • 38% of state CIOs say their state has some sort of cyber insurance
  • Georgia has the largest amount of cyber coverage of any state
    • $100 million in coverage. $1.8 million-a-year premium & a $250,000 deductible per incident

Governing | Fearing Hackers, States Start Buying Cyber-Insurance + Insurance Journal

6 Ways Sunshine State Moving Toward CyberSecurity Leader

Florida looks to be THE state for cybersecurity. Here’s what it is doing to get there:

  • Higher Education. 
    • Florida currently has 13 schools that the National Security Agency has designated as centers of academic excellence in cybersecurity education or research.
    • Florida universities and colleges offer  40 cybersecurity-related programs for graduate and undergraduate studies 
  • Workforce Pipeline.
    • ​The Florida Center for Cybersecurity helps universities & students
    • Shapes…

+1 Nutmeg State. Cyber Security Task Force are en vogue with State Leaders & Law Enforcement

Connecticut is creating the Connecticut Cyber Task Force.

The Connecticut Cyber Task Force will consist of:

  • a mix of Local, state and federal law enforcement agencies:
    • FBI
    • Drug Enforcement Administration
    • U.S. Secret Service
    • U.S. Postal Inspection Service
    • Homeland Security Investigations
    • Internal Revenue Service – Criminal Investigation
    • Defense Criminal Investigative Service
    • Connecticut State Police
    • 11 police departments from across the state, including the Bridgeport,…

State Regulator Subpoenas Company After Data Breach. What your Clients Need to Know.

The State:  New York

The regulator:  New York’s Department of Financial Services

The Subpoena: Seeks more information about Equifax’s data breach, including:

  • details on when Equifax learned of the breach
  • details on what actions Equifax took after the breach was discovered

More regulatory enforcement in the works? Yes, New York also wants to impose the financial data security rules it finalized this year to apply to credit reporting agencies like Equifax.

What does this mean for other…

+1 State Bill. Equifax Reaction from Bluegrass Country. Procurement Opportunities + New Encryption Standards.

Kentucky Attorney General proposes revisions to the state’s data breach notification statute to require:

  • Kentuckians impacted by a data breach would gain access to a free credit freeze
  • Require access to 3 free credit reports each year from each of the major credit reporting agencies
  • Require 5 years of credit monitoring
  • Require all credit reports be encrypted

WCPO | Kentucky’s attorney general proposes new data breach protections after Equifax incident

Regulatory Trend. State Elections Security Team from the North. Go Bears.

Wisconsin’s election officials have created a state elections security team, and here’s what you need to know:

  • Inter-agency Communication.  It will work with federal, state and local elections officials
  • Cyber security Infrastructure. Builds on cyber-security steps already taken
  • Best Practices. Establishes best practices to address ever-changing threats
  • Statewide Policies?  The team will consider whether to mandate that local clerks meet minimum security requirements for hardware and…

+1 State Lege Acts in Response to Equifax. Read the Bill. 3 Points from the A.G.'s Supporting Op-Ed.

New York State Assembly is pursuing SB06880 to require a consumer to be notified of a breach within 15 days of discovering the breach.New York SB 06880 (2017)

Supporting changes to New York’s Data Security and Notification Act, the state Attorney General states:

  • Expect more from companies entrusted with your data
  • All companies need reasonable security measures for their scale of company and type of business (what’s good for Equifax isn’t good for the Zavala Patisserie)
  • Private information…