InfoHive – Data Security – Page 154

6 Data Security Policy Trends in 2018

Policies to improve data security workforce
Liability policy for businesses that utilize 3rd parties to manage and mitigate security incidents and challenges
Policies to encourage more women in data security workforce
Liability and notification requirements when comapnies utilize automated security security tools
Policies that Support Awareness and Training of existing workforce
Policies that ecourage businesses to maintain a base level of data security and notification requirements

Progressive Market’s analysis lists 3 drivers for an increased demand in cyber insurace/data security insurance including:

legislation on data security
growing number of cyber-attacks which have led to great losses for organizations worldwide
rise in awareness of different cyber risks
Digital Journal | Cyber Insurance Industry Will Be the Next Big Thing in 2018

Refreshing our recollection:

OHIO is considering SB 220 that ties the NIST standards to liability limitation. Yes, tort reform meets data security.

Input on Draft Standards:

Feedback and comments should be directed to cyberframework@nist.gov(link sends e-mail) by January 19th, 2018.

3 Goals of the draft standards is to align the needs of :

Flexible Standards

The standards should eveolve as technology evolves

New buzz words are emerging in dagta security policy like: Cyber attack lifecycle

A new report by the Center for Connected Medicine found that data security leads th eminds of health care businesses:

Would health care providers pay cybercriminals?

In a repsonse to cybersecurity challenges to rail, H.R. 4474 was filed that requires:

requires a report to Congress on cyber and physical threats presented by foreign-owned software to the transportation sector
Directs DHS to inform the industry about technical assistance it offers on cybersecurity.

Missouri will be considering SB582 (2018) about student data breach notification.

SB582 requires notification of a student data breach to 3 parties:

U.S. Senator Bill Nelson’s S.2179 would trigger criminal charges if:

The criminal charge comes with up to 5 years in prison and/or a fine.

Who is making a request that medical device makers disclose component parts? House Committee on Energy and Commerce

On what agency are these policymakers making a request? Department of Health and Human Services

What is Department of Health and Human Services being asked to do?

Require medical device manfuacturers to dislcose:
- bill of materials (BOM) for each piece of medical technology
- describe the device’s components
- describe software utilized
- disclose any known risks associated with those parts
To promote cybersecurity through transparency