Regulatory TREND. State Secretary of State Imposes Voting Machine Requirements in the Mountain Laurel Flower State

Pennsylvania Secretary of State imposed a 12/31/2019 deadline for:

  • each county in Pennsylvania
  • to order new voting machines
  • that keep a paper trail of each ballot

The total estimated cost for all counties: Between $95 million and $153 million

Penn Live | Pa. says counties must have new voting machines – with paper trails – for next presidential election

 

Local TREND. Promoting Cyber Security Skills in Public Education with Mayors Cyber Cup. 3 Points about the Competition.

Who is behind the California Mayors Cyber Cup? California Mayors and California Cyberhub

The competition: brings high school and junior high school students from across the state to represent their specific cities in a cybersecurity competition

The policy goals: 

  • educated workforce
  • leader in addressing the global cybersecurity skills gap
  • helps cities meet economic development goals to strengthen the workforce

CISION | California Uses Cyber Competition to Bring Cybersecurity Awareness to Communities Across the State 

Campaign TREND. Campaign Hacked. Campaign Funds Taken. What you Need to Know

the candidate: California State Senate incumbent Sen. Richard Pan, D-Sacramento

the alleged hack: Sent the campaign treasurer, from the candidates account, an invoice for a vaccine-related nonprofit organization, billing  the campaign for $46,000,  which was paid

What track was left? A series of emails between the Campaign Treasurer and the hackers, pretending to the candidate, with the treasurer asking whether the candidate really wanted to pay the Texas based vaccine related non-profit

Sacramento Bee | Hackers stole his campaign cash, Sacramento lawmaker says 

Business TREND. New Data Security Business Coalition.

Members of  “Reform Government Surveillance”: Apple, Google, Yahoo, Microsoft, Twitter

6 Plank Agenda:

  • limiting government authority to collect user information
  • enhancing government oversight
  • promoting transparency about government demands for data
  • preventing hurdles for sharing information
  • ensuring cooperation between nations’ governments
  • encryption. opposing any government required engineered vulnerailities in technology

Politico | SURVEILLANCE COALITION INCLUDES NEW AGENDA ITEM

LEGE TREND. Cutting Costs. Cybersecurity. Small Businesses. The Government is Here to Help Small Business.

The legislation: Small Business Advanced Cybersecurity Enhancements Act of 2018 H.R. 4668

3 Points from HR 4668:

  •  create cybersecurity assistance units at Small Business Development Centers (SBDCs) throughout the country
  • point-of-contact for small businesses that suffer a cyber-attack
  • Coordinate expertise from several federal agencies to provide small businesses with the best resources to prevent and recover from cyber-attacks.

The Support Letter from the US Chamber:   HR 4668 Letter 

3 Points from the US Chamber letter:

HR 3668 will help small business better protect themselves against malicious actors

HR 3668 will help small business increase the timely exchange of information between the public and private sectors

HR 3668 needs an  amendment to  help clarify liability protections in the bill for larger private entities

WLUC | Peters, Risch introduce bill to increase federal cybersecurity resources for small businesses

Data Security Issues at the Conference of Western Attorneys General. 5 Topics. 2 Enacted Laws

Conference of Western Attorneys General will be discussing the following data security issues this year:

  • data privacy, cybersecurity, and digital piracy
  • breach notification
  • the European Union’s data protection regulations
  • national security & cybersecurity intersection
  • FinTech

Enacted Laws to be highlighted:

  • Arizona’s Regulatory Sandbox Program, signed into law by Governor Doug Ducey on March 22, 2018
  • Arizona House Bill 2154 into law on April 11, 2018 that prioritize data privacy in partnership with the AG’s office

Why will these bills be highlighted: Arizona Attorney General Chairs the Conference of Western Attorneys General

Regulatory TREND. State Attorney General. Launches Searchable Data Breach Database.

The Delarware Attorney General launched a new webpage that has 4 data secuity resources:

  • Online Reporting of Data Security Breaches
  • Data Security Breach Notice Database
  • Model Form for Providing Notice to Consumers and Other Affected Persons
  • Links to Online Cybersecurity Resources

Delaware.gov | Attorney General Denn Announces New Online Data Security Breach Reporting Resource

Lege Trend. State Net Neutrality Bills. 2 Reasons to Support the Bill in the Blue Columbine State

State: Colorado

The Net Neutrality Bill in Colorado: HB18-1312 

What does Colorado’s HB 18-1312  do?

  • Any entity receiving state funds to provide internet service, like rural broadband programs, must commit to net neutrality
  • Requires net-neutral service preference when state taxpayer dollars are being spent on internet services

What reasons do Colorado Legislatorsy offer to support Colorado’s HB18-1312?  

  • The Colorado Bill has nothing to do with the FCC reclassification, unlike what the Americans for Tax Reform Argument from Digital Liberty
  • 83% of Americans support allowing non-net-neutral services

The Hill | Colorado must fight to protect net neutrality

9 Proposed Health Care Cyber Security Policies from a Health Trade Association. Medical Supplier Liability is the Key.

Healthcare Supply Chain Association recommends these contract provisions for health care contracts:

  • Suppliers should warrant their compliance with FDA premarket and post market guidance relative to cybersecurity risks throughout their product’s lifecycle.
  • Products should be assessed and warranted to be free of known malicious code or other vulnerabilities at the time of delivery and/or implementation.
  • Suppliers should comply with all reasonable security practices required by the provider that are consistent with current network and device security guidelines and best practices looking to:
    • International Organization for Standardization (ISO) International Electrotechnical Commission (I(IEC) ( ISO/IEC)
    • the Association for the Advancement of Medical Instrumentation (AAMI)
    • the Open Web Application Security Project( OWASP)
    • The SANS Institute
    • the Center for Internet Security
    • National Institute of Standards and Technology (NIST)
  • The expected useful life of the device or service should be specified within the purchase agreement and security updates to the software and all supporting software components should be made available for the stated useful life at no additional cost to the provider
  • Suppliers should make every effort to assist providers in resolving cybersecurity threats and vulnerabilities in a timely manner.
  • Purchase agreements for medical devices and services should contain appropriate liability and warranty provisions that contain no limitations on supplier’s liability due to failure to comply with cyber security terms.
  • Cyber security sharing initiatives should be explicitly allowed and exempted from any non-disclosure provisions
  • A Manufacturers Disclosure Statement for Medical Device Security (MDS2) should be provided for any device that maintains or transmits data.
  • SUPPLIER WARRANITES. Suppliers should warrant that they internally follow cybersecurity best practices, provide documentation describing in detail their cybersecurity/penetration testing process as well as program details for patching, incident response and secure set up and configuration.

HSCA | Recommendations for Medical Device Cybersecurity Terms and Conditions

  1.