utilities – Page 5 – InfoHive

State Chief Information Officers Call for Improved State Data Security. 3 Key Informed Intel.

What group is calling for improved state data security systems? National Association of State Chief Information Officers

What sparked the call to arms? the cost of cyber crime world wide is $375 billion to $575 billion, which is labled a threat to democracy

What do the NASCIO propose states do? Create statewide cybersecurity ecosystem

What would a statewide cybersecurity ecosystem link?

The U.S. Justice Department arrested invididuals that attempted to break into a small dam to disrupt operations. The informed intel:

1st time someone has been charged with disrupting, or attempting to disrupt, critical U.S. infrstructure.
The charges are” cyber myham” to disrupt the water infrastructure.

Who is issuing the warning? The Obama Adminsitration

What entities are being warned about data security threats?

What’s sparked the warning? The attack n the Ukraine’s power grid 2 months ago. It was the first cyberattack that produced a wide spread blackout

What was the target of the cyber attack? industrial control systems that act as the intermediary between computers and the switches

What could hackers do with control…

data breach defined in new Orgegon law as:
- “an unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal information that a person maintains.”
personal information that triggers the notification statute
- Social Security number;
- Driver license number or state identification card number issued by the Department of Transportation;
- Passport number or other United States issued identification number;…

Data Breach Definition.
- What data was breached?
- The level of knowledge the data holder must have of the breach before notification is triggered. Did they know? Is it reasonable that this data was breached?
How to treat good faith access to data by an unauthorized employee
How to treat the breach of account creditial information.
- user name, passwords, and security questions
Timing.
- When must notification be given?
How to treat data processors, people who hold the data but…

What dam got hacked? Iranian hackers targeted a dam in New York. Shortly thereafter Ukranian hackers got into a power grid.

What type of hack triggers a state response or the creation of a new state penalty?

A cyber security researcher in California discovered that Cyberattackers had opened a pathway into the networks running the United States power grid.
- Digital clues show hackers tied to Iran have possession of passwords and engineering drawings of dozens of power plants
- In 2012 and 2013 Russian hackers sent encrypted commands to points on the US power grid
Why is the power grid so vulnerable? An aging, outdated power system
Just like other hacks, vulnerabilities occur in 3rd party…

New York Legislature, at the behest of its Attorney General, is strengthening its data security laws.

Assembly Bill 6866 adds new data to protection requirements and increases penalties.

This bill creates these standards that establish compliance with the law for businesses:

New York Legislature is considering stronger data security laws which would:

increase penalties against companies from $150,000 to $1,000,000
in addition to current required protected information of Social Security, driver’s license and credit card numbers, this bill would require protection of biometrics like fingerprints
user names, email addresses, securty questions and answers
health information protected under HIPPA
establishes reasonable safeguards for business
establishes…

Congress is working to secure the nation’s power grid because the power grid is facing a major cyberattack because: