InfoHive – Data Security

Who: Mastercard

Where: European Union

What: The European Cyber Resilience Centre

The goal: affiliation between public, private and regulatory sectors to support enterprise resilience

Mastercard’s partners in the public private project:

• national cyber intelligence centers
• industry groups
• law enforcement agencies
• central banks across Europe – ECRB, ECCFI, Europol, FS-ISAC, INTERPOL, NBB and the U.K.’s NCA and NCSC

PYMTNS | Mastercard Introduces European Cybersecurity Center

Where: Iowa

What is the Right to be Forgotten Act? Senate File 2236 (2020 | IA) would allow people to have information removed from “the internet”

What 3 types of information could not be removed from the internet:

• criminal convictions
• litigation relating to a violent crime
• matters of significant public interest

How long would an internet operator have to remove content? 30 days

The Gazette | Bill Could Make Your Cringey High School Posts Disappear

The machines have arrived in OHIO to unleash artificial intelligence (AI) on state regulations.

What’s the Republican goal of AI review of state regulations?

• streamline state regulations
• eliminating redundant permitting requirements

The project names: Common Sense Initiative & InnovateOhio

The leader of the projects: Ohio’s Lt. Governor Husted

The procurement: Up to $1.2 million for a private company to develop the AI tools

The Plain Dealer via Governing | Ohio to Analyze State Regulations with Artificial Intelligence

The Opinion request: RQ-0332-KP

The requestor: Hill County Attorney

The Question to be answered: Whether the board of directors of appraisal districts are considered “employees” or “elected officials” for purposes of cybersecurity training under Government Code Section 2054.5191(a-1). 

Why is this a question? Appraisal board directors are elected by taxing jurisdictions, technically speaking, but are appointed. Could the legislation have intended to skip over appointees?

What: S.3045 – Cybersecurity Vulnerability Identification and Notification Act of 2019 (2020 | 116th Congress)

The goal: compel ISPs to share details of vulnerable entities with the Cybersecurity and Infrastructure Security Agency

The concerns:

• Privacy
• Police powers that could kick in when ISP details are shared

NextGov | CISA Director Makes Case for Subpoena Power over Internet Service Providers

Where: Baltimore County, Md

How will the registry operate? voluntary private security camera registry for property owners with devices pointed toward a public right-of-way

What’s the purpose of the registry? to map private security cameras to give law enforcement prompt access to footage while investigating crimes

What’s the incentive for citizens? the county will waive alarm permitting fees for new alarm system installations

Baltimore Sun | Governing | County Might Use Private Cameras to Improve Public Safety

Where: Costa Mesa, CA

What issues did Costa Mesa address in their 5G regulations? potential health risks of 5G technology

How were the city ordinances tweaked?

• Distance requirements for small wireless communication facilities — e.g. small boxes on street poles
  • must be 750 feet from other communication facilities of the same company
  • within 250 feet of other companies boxes
  • even closer in non-residential areas
• Resident Notification. Created an opt-in for residents to receive an email every time a wireless provider applies to install a new small cell box, or any time a provider asks to swap out 4G technology for 5G

Governing | City Council Responds to Community, Adjusts 5G Regulations

What: a broadcast television search engine used by political campaigns to monitor opponents & track ads was hit by ransomware

Data that may have been accessed: Campaign data including email addresses of candidates

What is the campaign concern: campaign data is sold or used for political advantage

CNET | Ransomware hits TV search engine popular among political campaigns

Where: UK

What regulations are being proposed to regulate IoT? Consultation on regulatory proposals on consumer IoT security

Key regulations:

• Secure Passwords. All IoT device passwords must be unique & not resettable to any universal factory setting
• Public Contact & Internal Investigation. Manufacturers of IoT devices must provide a public point of contact to report a vulnerability that will be acted on in a timely manner
• Security Update Timeline. Manufacturers of IoT devices must explicitly state the minimum length of time for which the device will receive security updates at the point of sale, either in store or online

Fast Mode | UK Gov Announces New IoT Cyber Security Laws for Smart Devices

What type of contractors are we talking about? Associated General Contractors of Washington

3 ways cyber insurance coverage helps the construction industry:

• ensure protection for corporate confidential information, such as under a non-disclosure agreement
• 30% of all cyber-related claims are ransomware attacks that can lead to a shutdown of a contractor’s computer network
  • ensure coverage for any data loss
• more often contracts require cyber security protections

Daily Journal of Commerce | Are you insured against cyberattacks? Here’s what contractors need to know