Data Breaches By the Numbers. How Constituents are Impacted.

How constituents feel about data breach laws:

  • 68% of internet users believe current laws are not good enough
  • 64% believe the government should do more to regulate advertisers
  • Favor limits on how long the records of their activity are stored
  •  74% of Americans say it is “very important” to be in control of their personal information
  • 64% of Americans have personally experienced a major data breach
  • 49% feel that their personal information is less secure than it was 5 years ago
  •  41% of Americans have dealt with fraudulent charges on their credit card
  • 15% have received notice that their Social Security number had been compromised.
  • 70% of Americans anticipate major cyberattacks in the next 5 years on our nation’s public infrastructure

EPIC.ORG | Pew Survey Finds Support for New US Privacy Laws, Limits on Data Retention: | Pew Survey Finds Majority of Americans Are Data Breach Victims

2017 Data Security New Legislative Trends.

  • adding biometric and geolocation data to the definition of personal information that triggers a data breach notification
  • regulations related to surveilance equipment used by law enforcement
  • protecting disclosure of a a person’s religious affilaition from the government

The Recorder | What to Expect in California Data Security and Privacy in 2017

2017 Data Security Recommendations House Committees. 15 Recommendations.

  • State Affairs recommendations:
    • a dedicated and collaborative cybersecurity initiaitive 
    • clear legislative direcetives
    • direct agencies to collaborate
    • a central repository for its cybersecurity program
  • Urban Affairs recommendations:
    • appropriate funds for a grant program to support cybersecurity training and information sharing costs for small municipalities and utilities
    • creation of cybersecurity training and information sharing programs within agencies
    • increase the level of cybersecurity expertise in state agencies
    • statewide cybersecurity coordinator in the Governor’s office and improving the cybersecurity resources and structure of the Department of Information Resources 
  • Government Operations and Transparency recommendations:
    • Require Executive Director, Commissioner, CEO level approval for annual agency cyber security risk report 
    • Increase the number of cybersecurity practitioners in Texas 
    • Create a Central Legislative Committee Responsible for Cyber Security Risks 
    • Funding to upgrade legacy systems
    • promoting collaboration, innovation, and entrepreneurship in cyber security to facilitate the commercialization of university research and development  
  • Investments and Financial Services recommendations:
    • support fully funding strategies within the Texas Department of Information Resources’ (DIR) Legislation Appropriations Request (LAR) to protect the state government’s computer network from cybersecurity threats, including security policy and awareness and security services.
  • County Affairs recommendations:
    • require all counties to install and maintain appropiate level of cybersecurity 

Lege Trend. Cyber Security + Fantasy Sports Regulations.

Massachusettes, home of the Draft Kings, passed new fantasy sports regulations.

The editorial board reactions: Fantasy Sports Regulations have no cybersecurity

The cybersecurity response from daily fantasy sports: 

  • fantasy sports regulations do require comapnies to have security measures
  • comapnies are subejct to prosecution for not following the regulations
  • the beauty of fantasy sports is that the playing information is public information

What cybersecurity experts say:

  • fantasy sports has 3 levels of cybersecurity to be concerned about: its operating platform, the application used by the player, and the network.
  • target for hackers could either be player information or impacting the game itself
  • recommend policymakers “borrow from other established security benchmarks, such as NIST, CIS, and ISO”

Legal Sports Report | Daily Fantasy Sports Regulation And Cybersecurity: A Closer Look

Business Trend: Encryption via Shredding Data. Cybersecurity Standards Need Flexibility.

 CryptoMove embraces a business model that replaces encryption with breaking data into pieces and moving it around. 

Instead of hackers having  way to your document in a garbage can, hackers have to reassemble microshredded pieces. 

Beware regulators who set a standard level of encryption as a requirement. The industry changes.

Tech Crunch | Security startup CryptoMove fragments data and moves it around to keep it secure

6 Crucial Elements of Cyber Security Legislation.

  1. Multidisciplinary application. Cybersecurity is not just for the Information Officer.
  2. Data is an asset. Protect it. Have a game plan for how long you’re keeping the asset.
  3. Data lives on mobile devices and moveable devices too. Protect those too.
  4. Know the information you keep.
  5. Train employees. Employees create cybersecurity breaches too.
  6. Legislative and regulatory data security standards are the floor, not the ceiling.

Tech Target | Six keys to creating strong data-security measures

TREND. Contracting Opportunity. Cybersecurity Validators.

The European Union Agency for Network and Information Security recommends  3rd party cybersecurity evaluations for self driving and connected cars. 

Why the need for 3rd parties? The current cybersecurity standards for vehicles is not enough.

Bonjour, new opportunities to provide cybersecurity evaluations…

The European Union Agency for Network and Information Security | Cyber Security and Resilience of smart cars