Hawkeye Attorney General Reviewing State Cyber Security Policies and Laws as Part of Equifax Response.

The Iowa Attorney General is reviewing the state’s cyber security protocols to do 3 things:

  • identify shortfalls in current legal requirements for those who store personal information
  • look to enhance consumer protections
  • seek to lessen the burden on consumers who’ve been victimized by data breaches
    • Such as “scrutinizing the fees that credit reporting agencies are allowed to charge Iowans for freezing and unfreezing credit reports — particularly data breach victims,”

Des Moines Register | Amid growing threats, Iowa lawmakers push for better state and local cybersecurity

Lege Trend: Cyber Security State Volunteer Corps. Read the Bill.

State : Michigan

When did Michigan create its Cyber Security Volunteer Corps?  2013 under the Michigan Department of Technology, Management, and Budget

What did the 2017 amendment do? Michigan’s HB 4508  codifies the Corps and permits volunteers to bring cyber-defense services to nonprofit organizations, private businesses, educational groups, and other non-governmental associations.

What is required of volunteers?  Volunteers must undergo criminal background and FBI checks

Is there charitable immunity for the corps? Yes

Homeland Preparedness News | New Michigan law assigns cybersecurity volunteers to network security assistance during cyber attacks

Stateline | Pew Charitable Trusts | Michigan Governor Signs Volunteer Cyber Corps Bill

US Treasury Report Supports Uniform State Legislation. Insurers and Data Security. See the Bill.

The U.S. Treasury Department’s October 276.2017 report entitled, A Financial System
That Creates Economic Opportunities Asset Management and Insurance, goes all in for uniform state legislation for data security model legislation for insurers.

What is the model legislation? The NAIC Data Security Model Law 

What’s the 10,000 foot view of the Model law?

  • Applies to insurers, agents, and other licensees.
  • Cover 3 hot data security issues:
    • implementation of information security programs
    • investigation of cybersecurity events, includ­ing risk assessment and risk management, as well as oversight of third-party service providers
    • notification to state insurance regulators about cybersecurity events 
  • The Model law does not take the place of stte data privacy and data breach notification laws

 

 

6 Ways Sunshine State Moving Toward CyberSecurity Leader

Florida looks to be THE state for cybersecurity. Here’s what it is doing to get there:

  • Higher Education. 
    • Florida currently has 13 schools that the National Security Agency has designated as centers of academic excellence in cybersecurity education or research.
    • Florida universities and colleges offer  40 cybersecurity-related programs for graduate and undergraduate studies 
  • Workforce Pipeline.
    • ​The Florida Center for Cybersecurity helps universities & students
    • Shapes curriculum to meet industry wants
  • Public Education
    • ​Including cybersecurity as early as kindergarten 
  • Business
    • ​ Creating a cybersecurity hub
    • Hosting “boot camp-style” training programs, meet-ups and events
  • Stronger Information Privacy Laws
    • ​the goal: to shape how companies approach issues such as securing personal information and disclosing to consumers when their data has been leaked.
  • Engage the Attorney General
    • ​Mimicking California and encouraging the State Attorney General to take a “strong stance toward digital privacy.”

Government Technology | Florida Sets Sights on Becoming Cybersecurity Front-Runner

Lege Trend. Cyber Security & Public Information. This State Says Not Public Information.

Michigan Legislature is moving HB 4973 to prevent cybersecurity efforts from being dusclosued under public information act. 

Support in the Michigan House: 101 to 5

The key bill text that exempts cybersecurity info from public information:  prevents disclosure of information concerning the  “confidentiality, integrity or availability of information systems.”

Potential policy benefit: the information protection could enecourage businesses to engagte in more information sharing on cyber security 

Michigan HB 4973 (2017) 

Lege Trend. Ports and Cyber security. 2 Key Points. Read the Bill.

Congress’ Strengthening Cybersecurity Information Sharing and Coordination in Our Ports Act will:

  • Require a maritime representative on the nation’s information sharing hub for critical infrastructure cyber threats run by Department of Homeland Security
  • Require Department of Homeland Security to improve cyber information sharing and coordination at U.S. ports

U.S. H.R. 3101 | Strengthening Cybersecurity Information Sharing and Coordination in Our Ports Act

The Hill | House passes bill to boost cybersecurity at US ports