+1 Nutmeg State. Cyber Security Task Force are en vogue with State Leaders & Law Enforcement

Connecticut is creating the Connecticut Cyber Task Force.

The Connecticut Cyber Task Force will consist of:

  • a mix of Local, state and federal law enforcement agencies:
    • FBI
    • Drug Enforcement Administration
    • U.S. Secret Service
    • U.S. Postal Inspection Service
    • Homeland Security Investigations
    • Internal Revenue Service – Criminal Investigation
    • Defense Criminal Investigative Service
    • Connecticut State Police
    • 11 police departments from across the state, including the Bridgeport, Bristol, Fairfield, Greenwich, Hartford, New Canaan, New London, Norwalk, Stamford, Torrington and Westport Police Departments
  • coordinated efforts for  emerging cyber threats
  • provide training, resources and investigative strategies to address the significant ransomware and business email compromise attacks

2 Priorities of the tax force:

  • identify and disrupt criminal organizations that use computer intrusions to defraud companies of their money and information
  • target criminal activity on the dark web

United States Attorney’s Office District of Connecticut | U.S. Attorney and Law Enforcement Partners Announce Formation of Connecticut Cyber Task Force

 

Election Trend. Social Media Disclosures. Read the Bill.

A bipartisan bill in Congress seeks to require social media companies to disclose the same campaign related information that is required of radio and tv.

Which social media companies would be affected? websites, apps, search engines, social media and ad networks with over 50 million unique visitors

What would be trigger amount for dislcosures?  if a person or entity spends at least $500 on political ads a year

What disclosures would be required?

  •  copies of ads
  • information about groups purchasing ads
  • data on the targets of the ads 

S 1989 (2017) by Kolbuchar, McCain and Warner

The Hill | Bill to halt election meddling on social media introduced

Alexandria Virginia News | Warner, Klobuchar, McCain Introduce Bipartisan Legislation To Prevent Foreign Interference In Future Elections, Improve Transparency Of Online Political Ads

 

12 TEXAS INTERIM CHARGES. DATA SECURITY. 1 Select Committee.

House Committee on Appropriations 

#5  Trends in data security & cost savings Monitor the ongoing implementation of Article IX, Sec. 9.13 of the General Appropriations Act and determine if state agencies are realizing cost savings and/or security enhancements in state operations related to cybersecurity, information technology, and cloud computing. Study trends in cloud computing and IT delivery services, and identify whether additional cost efficiencies, economies of scale, or IT modernization could be achieved. 

 

House Committee on Business & Industry 

#3    Data gathering by employers & businesses. Review the increased use of third party data gathering, particularly individual background information and history, by Texas employers and businesses. Examine the standards for accessing, providing, and updating accurate background information used for employment purposes. 

#4 Data breaches & securing sensitive data. Study the impact of data breaches or theft on Texas consumers and businesses. In particular, study the consequences of recent data breaches and subsequent mitigation efforts. Review the existing standards of risk as well as the current best practices in securing sensitive and personal information held or used by private industries. Determine if existing rules and regulations offer adequate consumer protection while allowing continued economic success for businesses in the state. 

House Committee on Elections 

#1 Harvey & Election Security. Study the potential impact of disaster events on election administration and security. Specifically, examine any effects or vulnerabilities identified during Hurricane Harvey and the subsequent recovery period.

#2  Election Security. Study the efficiency and security of the state’s existing election protocols and systems, including but not limited to registration and early voting procedures, ballot styles, and the rules regarding time and location of polls. Identify available processes and options which could lead to increased voter participation and election integrity. 

House Committee on Government Transparency & Operation 

#1 Harvey & Data. Public/Private Partnership. Examine the role of technology in disaster preparedness and the response to Hurricane Harvey and future natural disasters. Review and make recommendations to drive innovation and efficiency and evaluate whether there are any regulatory impediments to collaboration between the public and private sectors. 

#2 Statewide Technology Centers. Evaluate whether qualifying state agencies are appropriately utilizing available state disaster recovery services, including the statewide technology centers. Consider the costs and benefits of allowing other states to participate in Texas’ statewide technology centers under Subchapter L, Chapter 2054, Texas Government Code for disaster recovery purposes.

#5 Interagency data sharing. Study how state agencies can share knowledge and practices, reduce duplicative data gathering, and conduct business in a more efficient manner through interagency data sharing. Review best practices to provide the public with more transparency and access to government information. 

 

House Committee on Investments & Financial Services 

#2 Security Breaches. Study the impact and risks that a large-scale security breach of a credit bureau has on Texans. Identify opportunities to protect Texas consumers and to mitigate the impact of such a breach. 

#4  Fin tech.  Study policy challenges in the area of financial technology. Evaluate the concept of a “sandbox” as a regulatory approach for enabling innovation and the feasibility of implementing such in Texas. If appropriate, make recommendations for possible legislative action to foster innovation in the finance industry. 

House Committee on Transportation 

#6  Smart Roads. Intelligent Transportation Systems. Study emerging issues in transportation related to technology and evaluate the state’s preparedness for addressing challenges and opportunities posed by technological advances. Review the implementation of state and federal programs and legislation related to intelligent transportation systems, autonomous vehicles, unmanned aircraft systems (i.e. drones), and other technological changes. 

Senate Select Committee on Election Security

In light of recent election irregularities in Texas, review voting security protocols as well as the responsibilities and duties of members of the Electoral
College. Specifically, examine the use of electronic voting machines and paper ballots, voting fraud and disenfranchisement occurring inside nursing homes and assisted living facilities, outside interference and manipulation of elections, and the voting requirements of presidential electors. Make recommendations to safeguard the integrity of elections, ensure the confidentiality and security of voting records, and ensure the will of the people is reflected through their ballot and carried out through their presidential electors. 

85th Texas Legislature Interim Charges | Texas House  | Texas Senate 

 

Full List of Equifax Filed Legislation.

Federal:

States:

  • New York SB 6879
    • ​require credit reporting agencies to automatically place a freeze on consumer credit files
  • ​New York SB 6880
    • require businesses to disclose breaches within 15 days of discovery
  •  Illinois (HB 4095 and SB 2230)  & Michigan (HB 5055)
    •  as well as measures providing for free credit freezes

4 Elements of Hack Back Legislation. Attack the attacker. Read the Bill. File it in Your State.

Congressman Tom Graves H.R. 4036:

  • “A voluntary review process that individuals and companies can utilize before using active-defense techniques;
    • This provision allows defenders to benefit from review of their proposed active-defense measures by the FBI Joint Taskforce, which will assist defenders in conforming to federal law and improving the technical operation of the measure;
    • The authority to conduct these reviews would exist under a two-year pilot program, and could be amended or renewed at a later date.
  • Requires notification to the government for the use of active-cyber defense measures that go beyond beaconing;
  • Clarification that the bill does not interfere with a person’s right to seek damages;
  • Requires an annual report on the federal government’s progress in deterring cybercrime.”

Tom Graves | Rep. Tom Graves Formally Introduces Active Cyber Defense Bill

4 States. 4 Election Data Security Measures. + procurement Changes

  • West Virginia’s elections team added a cybersecurity expert from the state National Guard with a top-secret federal security clearance
  • Colorado “will now verify election results via an advanced statistical procedure called a risk-limiting audit.”
  • Rhode Island “will now verify election results via an advanced statistical procedure called a risk-limiting audit.”
  • Delaware is moving its voter-registration list off the state’s aging mainframe computer

There are also new federal guidelines for election machines.

New York Times |  Wary of Hackers, States Move to Upgrade Voting Systems

+1 State Lege. Equifax State Legislative Fix. 4 Key Points + Bill Roll Out Info

The State: Kentucky

The proposed legislation would require companies responsible for a data breach to provide impacted Kentuckians:

  • access to a free credit freeze
  • 3 free credit reports each year from each of the major credit reporting agencies
  • 5 years of credit monitoring
  • Require all credit reports be encrypted.

How was the bill proposal announced? The State Attorney General Andy Beshear and the bill’s author, State Senator McGarvey, at AARP Kentucky’s Louisville headquarters

Insider Lousiville  | AG, senator announce legislation to protect Kentuckians following Equifax data breach 

Trending Ride Share Issue in the West. Data. Data. Data. Cities v. States v. TNCs v. Riders.

California regulations on ride share require annual data reports. The data required to be sent to the state includes:

  • types of service they provide
  • what neighborhoods they serve
  • how many miles their drivers log

What data do the cities want? 

  • Data to help solve local transporation issues
  • Ride Share’s affect on roads
  • Ride Share’s affect on the environment

The data’s big bad issue: Privacy concerns about rider personal information

The Recorder | Uber and Lyft Resist Regulators’ Appeal for Data Sharing

October is Cyber Security Awareness Month. 3 Ways Business & Government Are Jumping on the Bandwagon.

October is National Cyber Security Awareness Month. Here’s exampkes of what governments and businesses have done to engage:

  • D.C. has a Cyberscoop’s  DC CyberWeek  that brings together experts, executives, innovators, influencers and decision makers from government and business sectors to learn, network, hack and improve cybersecurity outcomes.
  • ESETand Wrapify are sending a squad of #CyberAware vehicles on San Diego roads offering cyber security trivia and prizes
  • Secure San Diego is a day event sponsored by partners The Cyber Center of Excellence & the City of San Diego  to showcase region-wide efforts to nurture a more secure cyber environment

We Live Security | Five cool things happening for National Cyber Security Awareness Month