Federal legislators will be asked to consider incentivizing businesses to build in cyber security into their products.
3 IoT Questions for House Energy & Commerce about Cybersecurity | Pwnie Express
Bigger Fines for Companies that Fail to Notify of Breaches.
The EU cyber security laws have experts touting that there will be bigger fines if companies fail to notify customers of data breaches.
Out-Law.com | Failing to notify known data breach could lead to bigger fine, says expert
TREND. Anatomy of A State Cyber Security Quick Reaction Force
Germany has created a mobile Quick Reaction Force to quickly address cyberthreats.
Which cyber threats will the Quick Reaction Force respond to? Cyber attacks on government agencies & critical infrastructure
Will there be cyber threat information sharing between business interests and the state? yes.
Why did they enact this Quick Reaction Force for cybersecurity? To protect Germany’s elections from Russian or Chinese hackers
Techies Say Social Media Better predictor of Election Results than Polls.
Analytics firms noted that Trump social media numbers among swing voters increased after the leaked Access Hollywood tape.
Other social media analysts say Trump’s social media sentiments were more positive than Clinton’s.
Tech Crunch | Analysis of social media did a better job at predicting Trump’s win than the polls
Legislation Protecting White Hat Hackers.
The flaw in cybersecurity law: Not modernizing the law to address white hat hackers
The goals of the legislative fixes:
- legislation more friendly to legitimate research
- by improving relationship improves between white-hat hackers & the owners of the products they investigate
The legislative fixes:
- The research by white hat hackers has to be for security purposes only.
- The exemption covers consumer devices, voting machines, medical devices, but not things like critical infrastructure, airplanes and major hospital equipment.
- The product being investigated by white hat hackers has to have been lawfully acquired.
- The white hat hacker research has to be done in a safe environment so techniques used to hack or otherwise compromise a product are not released in the wild.
- The white hats cannot violate other laws.
Data Breach. Electric Infrastructure. Telecommunications.
U.S. military hackers have penetrated Russia’s electricty grid & telecommunications in repsonse to Russian attempts on U.S. infrastructure.
NBC News | U.S. Govt. Hackers Ready to Hit Back If Russia Tries to Disrupt Election
3 Data Security Lessons. 1 Senator. 1 Sex Scandal.
The sex scandal Senator’s home: Nebraska
The new legislative policies for the Nebraska Legislature:
- “Prohibits senators and their staff from posting information on personal, campaign and commercial social media websites through the state’s secure network or state equipment.”
- Require user passwords
- Require user passwords to be updated annually
Background on Nebraska’s IT protocols:
- No password policy
- No requirement to change passwords
- Senators’ state-issued computers DO NOT require access with log-in credentials
2 States have Election Cyber Teams for Protection.
Which two states have national guard cyberteams monitoring the election? Ohio and Maryland
What’s swing state Ohio doing?
- conducting penetration testing to see if state systems contain vulnerabilities
- monitoring election data systems for irregularities
- From Ohio’s Secretary of State: “Cyberwarfare is a new front for the military, for business and now for elections.”
What’s Maryland’s plan?
- Maryland was one of the first states to engage their national guard in cyberdefense.
Business Trend. Health care and Tech. By 2018, 70% of health care will be tech driven. 7 Upcoming trends to be regulated
Apple is poised to enter health care in these 7 ways:
- clinical trial partnership with Beth Israel Deaconess Hospital
- precision medicine initiative with Scripps Translational Science Institute
- partnered with IBM, Johnson & Johnson and Medtronic on cognitive computing platform called Watson Health Cloud
- offering tailored data analytics services to clinicians
- bought a health care tech firm to advance interoperability by aggregating health data into a single digital patient record
- build up healthcare credentials with Apple’s HealthKit, ResearchKit and CareKit platforms
- patent application pending for a new wearable device that can accurately measure electrocardiographic information across different areas of the body
- two new health apps for Apple devices — AirStrip and 3D4Medical
- AirStrip allows doctors to check appointment schedules on an Apple Watch and get feedback on patients’ diagnoses
- 3D4Medical’s large portfolio of 3D anatomical images, doctors can help patients visualize injuries and other medical conditions.
Regulations will protect the health care data on the device, in transit, and in storage from disclosures and from ransomware.
4 Data Privacy Issues with Personal Fitness Tech. Ripe for Legislative Disclosures.
- None of the companies will give users proper notice about changes in their terms
- All of the wristbands collect more data than what is necessary to provide the service
- None of the companies fully explain who they may share user data with
- None of the companies state how long they will retain user data
Tech Crunch | Fitbit, Jawbone, Garmin and Mio fitness bands criticized for privacy failings