State Chief Information Officers Call for Improved State Data Security. 3 Key Informed Intel.

What group is calling for improved state data security systems? National Association of State Chief Information Officers

What sparked the call to arms? the cost of cyber crime world wide is $375 billion to $575 billion, which is labled a threat to democracy

What do the NASCIO propose states do? Create statewide cybersecurity ecosystem 

What would a statewide cybersecurity ecosystem link? 

  • state government

  • local government

  • federal government

  • higher…

INTERIM. Ride Share Data. Private Data Shared with Government. 3 Key Intel to Be Informed.

Where did the ride share data report originate? UBER produced its first ever transparency report

The numbers of data requests from July 2015 to December 2015:

  • 33 requests from government agencies
  • 11,644,000 riders affected
  • 583,000 drivers affected
  • California, NYC, and Chicago governmental entities requested the most data
  • 517,000 riders & 14,000 drivers impacted by a Houston, TX data request
  • 370 riders & 370 drivers impacted by a San Antonio, TX data request

Uber | Transparency…

Trucks. Buses. Ambulances. Cyber Security Issues. 3 Key Points.

  • Spanish hackers discovered that devices that make logisitics companies more efficient are subject to being controlled by hackers
  • Companies use “telematics gateway units” or TGUs, small radio-enabled devices attached to industrial vehicles’ networks to track their location, gas mileage and other data“
  • The ability to locate large vehicles and ambulences creates public safety concerns

Wired | Thousands of Trucks, Buses, and Ambulances May Be Open to Hackers

INTERIM. More Data Security Warnings for Energy Infrastructure

Who is issuing the warning? The Obama Adminsitration

What entities are being warned about data security threats?

  • power companies
  • water suppliers
  • transportation networks

What’s sparked the warning? The attack n the Ukraine’s power grid 2 months ago. It was the first cyberattack that produced a wide spread blackout

What was the target of the cyber attack? industrial control systems that act as the intermediary between computers and the switches

What could hackers do with control…

Business Trend & Lege Trend: Data Security Regulation Impact to Car Manufacturing & Dealers. 3 Keys .

  • Auto Manufacturers are facing data security issues related to connected cars
  • Car Dealers are facing dats security issues related to customer data, the link of that customer data ties to car data
  • This combination that ties customer data privacy to hackable connected cars requires “robust cyber security infrastructure could give his firm competitive advantages against their competitors.”

Computer Business Review | Cyber security showroom – How Lookers put data security into car dealership

Data Security and Motor Vehicles. Who Proposes What.

What regulation proposals are floating around related to connected cars and data security?

INTERIM. Home of the Ducks is now Home of Data Security. 5 Bits of Informed Intel from a new Data Security State Law.

  • data breach defined in new Orgegon law as:
    • “an unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal information that a person maintains.”
  • personal information that triggers the notification statute
    • ​Social Security number;
    • Driver license number or state identification card number issued by the Department of Transportation;
    • Passport number or other United States issued identification number;…

INTERIM. 8 Elements of Data Security Laws & Regulations.

  • Data Breach Definition.
    • What data was breached?
    • The level of knowledge the data holder must have of the breach before notification is triggered. Did they know? Is it reasonable that this data was breached?
  • How to treat good faith access to data by an unauthorized employee
  • How to treat the breach of account creditial information.
    • user name, passwords, and security questions
  • Timing.
    • ​When must notification be given?
  • How to treat data processors, people who hold the data but…

INTERIM. Auto Manufacturers. Hackers. United Front. The Impact to Lege Trends and Regulatory Trends.

Why is GM embracing white hat hackers? To help identify and notify of security risks.

What’s the industry response? Just announed Detroit’s first public security vulnerability disclosure program bringing together GM and HackerOne

What’s the benefit to white hat hackers? As long as thehackers follow basic published protocols, the hackers can challenge security without legal repercussions.

So, its creating charitable immunity for white hat hackers? in contract form, yes. It allows…