3 Issues Create a Quagmire. Plains State Cloud Storage Protection Legislation.

The State:  Kansas

The issues that are clouding a bill to protect data stored in the cloud:

  • Language that protects attorneys who strore client information in the cloud.
    • Opponents say it elevates this privilge above other privileges
  • Language that limits release of the information to the subscriber.
    • Law enforcment says they can now gain access without a warrant to the information.
  • Language that requires a warrant.

Topeka Capital Journal | Kansas House panel debates security of high-tech ‘cloud’ information storage

+1 Kid Toy Hacked. Hello Data Security Law Fix.

What screams fix cybersecurity laws? A breach of a voice recording teddy bear

What’s the issue that would be addresed in legislation?  The Teddy Bear company stored customer data and information on a public database that required no authentication. 

What does no authentication mean? No security protocols, no passwords, no limited IP addresses etc… It’d be like leaving your credit card statement on a public park bench.

TechHive | Smart teddy bears for kids suffer a contentious data breach

FoxNews | CloudPets data breach: Toy security in the spotlight

Polling hackers.

  • 88% of hackers at the 2016 DEF CON conference say they can hack a target in 12 hours
  • 81% of hackers say that they can identify and exfiltrate a target’s data in 12 hours
  • 50% of hackers change their method each time
  • 84% of hackers social engineer their vicitms- hello Facebook profiles
  • 52% say training employees is effective

SC Media | Survey explores the minds of hackers: 81% claim they can compromise target in under 12 hours

TREND. Data Protections for Home Devices. Warrant or no Warrant.

Alexa, the Amazon product, home guru records voices. 

Alexa also records suspected murderers, at least it did in Arkansas. 

What kind of protection is Amazon seeking for the Alexa recordings? 

  • Until law enforcement creates a compelling enough case, no Alexa recordings
  • Amazon wants prosecutors to “prove the data isn’t available anywhere else and that it’s sufficiently related to the subject of the investigation”

Next step: Legislative fixes

The Verge | Amazon says Alexa’s speech is protected by the First Amendment

 

Public-Private Partnership to Improve State CyberSecurity Training. Improve Student Cybersecurity

The Public Private Partnership: Virginia and Amazon

The role of Amazon: to support scalable cloud infrastructure and collaborate on cybersecurity educational efforts 

How far down the state employee food chain will education go? The partnership will also help educate teachers with cybersecurity courseware

Governor Terry McAuliffe | Governor McAuliffe Announces New Strategic Relationship With Amazon Web Services to Expand Cybersecurity Education  

Data Security Legislation Trend. 1st Legislative Phase is Missing. Ask the experts.

A former top national security adviser says the cybersecurity legislation that is necessary is:      uniform definitions for cybersecurity across all government levels.

Why do we need uniform definitions?  Uniform defintions improve strategy for enforcement and legislation.

Defense of Democracies | Framework and Terminology for Understanding Cyber-Enabled Economic Warfare

Business TREND. 5 Data Security Protections for Oil and Gas Companies.

5 ways oil and gas comapnies can minimize legal exposure from a data breach:

  • Plan ahead. Have an incident reponse team in place.
  • Insurance. Lots of policies cover data security now, check your policy.
  • Stay up to date on data security laws & regulations. There are overlapping levels of laws between state and federal and overlapping agency jurisdictions.
  • Create & Maintain a data policy. Prescribe what is retained and for how long.
  • Train and test your employees.

Oil and Gas Financial Journal | Legal Liability From Cyber Attacks