Fresh Regulatory & Legislative Issue: Cybersecurity & Aerospace

Congress, and thus soon the states, will openly consider regulatory and legislative measures for cybersecurity in aerospace including:

  • aerospace equipment
  • airport cybersecurity
  • connected devices

Why should I care about this for my clients?  Atlanta’s airport 2017 ransomware attack costs  may be upward of $40 million in direct costs and loss of productivity

House Committee on Homeland Security | UNDERSTANDING CYBERSECURITY THREATS TO AMERICA’S AVIATION SECTOR

Local TREND, Cities & Cybersecurity Insurance

Cities with mentioned cybersecurity insurance coverage:

  • Houston, 3  policies covering $10 Million with a $471,400 premium
  • Dallas
  • San Antonio via existing property policy
  • Ft. Worth,  $5 million cyberpolicy with a $99,570 premium
  • Atlanta 
  • Charlotte, N.C
  •  San Francisco has $50 million cyberpolicy for its public-health department

Cities actively looking at acquiring policies:

  • Boston
  • Nashville
  • Washington, D.C.
  • San Jose, CA

Self insured cities:

  • Seattle 

Wall Street Journal | More U.S. Cities Brace for ‘Inevitable’ Hackers

Lege TREND. Creating an Office of Elections Security. 9 Policy Goals for Secure Elections.

California’s AB 3075 (2018 | CA) which will require the Office of Elections Cybersecurity within the California Secretary of State’s office to:

(1) Coordinate efforts between the Secretary of State and local elections officials 
(2) Monitor and counteract false or misleading information regarding the electoral process that is published online or on other platforms and that may suppress voter participation or cause confusion and disruption of the orderly and secure administration of elections.
(3) Coordinate with federal, state, and local agencies the sharing of information on threats
(4) Develop best practices for protecting against threats to election cybersecurity
(5) Develop and include best practices for cyber incident responses in emergency preparedness plans for elections.
(6) Identify resources available to state and county elections officials.
(7) Advise the Secretary of State
(8) Liaison between the Secretary of State, other state agencies, federal agencies, and local elections officials on election cybersecurity issues
(9) Coordinate effort  to protect the security of Internet-connected elections-related resources, including all of the following:
 

3 Ways State Attorneys General Control Data Security Policy

  • Create policy by litigating
    • ex: suits to support online privacy could be the new tobacco lawsuit
  • Blocking Federal Policies
    • Repulican Attorneys General sued Obama Administration 46 times in 8 years
    • Democratic Attornesy General have sued the Trump Administration 35 times in year 1
  • Crafting policy by managing State-level settlements delivering big headlines and fast payouts
    • ex: Equifax settlements

Forbes | How state attorneys general are driving tech policy

Lege Trend. Bill Protects Internet Speed. What you need to know. How it Impacts Providers.

California Legislature overhwelmingly passed SB 822 (2018 |CA) that will:

  • bans internet service providers from blocking access to legal online content
  • bans internet service providers from forcing websites to pay more money for faster speeds
  • restores internet protections that federal regulators rescinded

Why did the Legislature enact this bill?

California elected officials passed the bill because the California fire agency complained that Verizon restricted its internet access during an emergency.

What do providers need to know?

  • throttling state agency internet acess in an emergency has repercussions.
  • when a state agency contacts an internet provider during an emergency selling another data plan has repercussions
  • taking family photos from social media to create memes opposing their actions has repercussions.

Sacramento Bee | Californians’ internet speed protected in bill sent to Jerry Brown

4% of State Websites Pass Security Tests. 2 Key Points. New Study.

Authors of Report: Information Technology and Innovation Foundation

The report: Benchmarking State Government Websites

What do I need to know?

  • States can improve their security by having their web servers properly enable HTTPS and DNSSEC
  • State website accessibility is improving with 67% passing mobile friendly standards

Texas came in 41st overall. Virginia #1. 

Governing | Only 4 Percent of State Websites Pass Security Tests 

Lege Trend. Tying Funding to CyberSecurity. 3 Points to Watch Out for in Legislation. Hello 3rd party providers.

The federal govenrment has tied Title IV Funding to data security, here’s the key standards that could be replicated by states:

  • Universities will be required to have “reasonable safeguards” to data breaches
  • Universities will beed an estblished response plan
  • Universities will need to oversee 3rd party service providers

Without these requirements, univeristies lose funding.

Department of Education | Breach Response Check List

EdTech | How to Tighten Higher Education Cybersecurity as Government Threatens Funding

Local Procurement TREND. Local WiFi Brings Telehealth Opportunity

What steps did Chattanooga TN take to expand health care accessibility?

  • Chattanooga’s utilities provider,invested heavily in fiber-optic network infrastructure, delivering 1-gigabit-per-second connections
  • The city actively explored  delivering telehealth services to residents who subscribe to EPB broadband services
  • Docity, as Hypepotamus reports, is “a HIPAA-compliant telehealth platform that works by partnering with communities and internet service providers to add telehealth access to their normal packages.” If users get broadband service from an ISP, they can add telehealth services for as little as $30 per month, the report adds.

State Tech | Chattanooga’s Broadband Investment Opens the Door to Telehealth 

4 Points from Techies About the Texas Voter Record Exposure

  •  a single file containing an estimated 14.8 million records was left unsecured, without a password, online
  • File ownership is not clear but is likely “Data Trust, a Republican-focused data analytics firm created by the GOP”
  • data includes fields that might score an individual’s believed views on immigration, hunting, abortion rights, government spending and views on the Second Amendment
  • data also includes additional personal information, such as a person’s phone numbers and their ethnicity and race

Tech Crunch | Millions of Texas Voters Records Exposed Online