Schools Access Kids Private Data. No Parental Consent. 3 Points of Informed Intel.

Scenario: School provides kid laptop/ipad. Kid uses laptop/ipad for school work and personal use.  School learns kid likes to watch YouTube at 3am and sleeps in class.

How can schools track students:

  • schools can access what programs/websites kids use
  • schools can access where the kids were when they used the laptop/ipad
  • some schools remotely monitor students through cameras on the devices

Are 3rd parties involved to monitor kids activity on school laptops/ipads? yes & they flag unusual behavior for schools.

What does this mean for kid’s privacy?

  • Schools can assemble behavioral patterns, learning habits or disabilities, and intellectual interests, stored and analyzed outside of the control of parents/students

Tech Crunch | Kids need to reclaim their data and security… especially at school

Business Trend. Allow Hackers to Hack your business. Improve Security.

Which car was hacked? Tesla Model S

Who did the hacking? Researchers

Does Tesla have a bounty program to report vulnerabilities? yes

What were the hackers able to control?  

  • sunroof
  • central display
  • door locks
  • braking system
  • activate the steering light
  • reposition the driver’s seat
  • windshield washers
  • open the trunk
  • fold in the side mirrors

PC World | Researchers hack Tesla Model S with remote attack

New Kid on the Block. Vendor Security Alliance . What you Need to Know.

Alliance members include:  Uber, Airbnb, Atlassian, Docker, Dropbox, GoDaddy, Palantir, Square, and Twitter

Goal of the Alliance: “streamline the vetting process that businesses use for evaluating vendors’ cybersecurity risks”

October 1st unvieling: security and compliance questionnaire to benchmark vendor risks

SC Magazine | Uber, Airbnb, Dropbox, and others form coalition to evaluate vendor cyber risks

3 Concerns about Data Security in Energy Sector

A recent Tripwire survey of energy cybersecurity experts reveals:

  • Most energy security experts don’t know what would happen if their systems were breached
  • Only 59% know how long it would take to find a hacker on their system
  • 73% believe they could detect unauthorized intrustions in their network

SC Magazine | Energy sector cybersecurity workers overconfident in their capabilities

Legal Trend. Regulatory Trend. Settling with Companies that Gather Data about Kids.

The State: New York

NY Settled a suit with Hasbro, JumpStart Games, Mattel & Viacom for violating what law? The federal Children’s Online Privacy Protection Act

What did the companies do? Gather personal data about children under 13

The settlement: collective $835,000 in penalties plus regular reporting to New York regulators

Engadget | Websites settle with New York over online child tracking

Reg. Trends. Gov. & Banking Regulator. State Banking Cyber Security Requirements.

Which state? New York

Which state officials are proposing cyber security regulations for banks/financial institutions? Governor Cuomo & New York State top banking regulator.

What will be required of financial institutions under these state data security regulations?

  • Required to hire a chief information security officer
  • Must implement measures that detect and deter cyber intrusions
  • Must meet consumer protection standards, with companies able to assess their own needs and adopt standards that meet their business
  • 72 hours to report a breach to  New York’s Department of Financial Services

The Wall Street Journal | New York Proposes Cybersecurity Regulations for Banks

New York’s Proposed Data Security Regulations for Banks

New York Department of Financial Services | GOVERNOR CUOMO ANNOUNCES PROPOSAL OF FIRST-IN-THE-NATION CYBERSECURITY REGULATION TO PROTECT CONSUMERS AND FINANCIAL INSTITUTIONS

Engadget | New York proposes online security rules for banks and insurers

Legal Trend. Credit Union Class Action After Retail Data Breach.

Where is this happening? Oregon courts

What is the complaint by the credit union and the other financial institutions in the class action? 

  • A restaurant chain failed to implement or maintain adequate data security measures for customer information
  • This caused the credit union to pay:
    • fraudulent charges 
    • replace cards
    • stop payments
    • block transactions
    • and other costs

SC Magazine | Oregon credit union sues Noodles & Company over breach

4 Recommendations for Protecting Student Data. Pay to Arm Yourself with IT Information. Stop being stingy.

Who is recommending student data protections?  A report from new report on data privacy from the Southern Regional Education Board

What are the 4 recommendations?

  • Clear & transparent state data governance policies. Make the policies easy to find for parents.
    • Print the policies out and pin them to parents at orientation
  • Fund & improve student data security
    • Stop being so stingy
  • Train the people who handle student data
    • Teach the teachers
  • Fund IT support at schools
    • Again, stop being so stingy, we know computers are scary. But, it’s 2016.

eschool news | Report: 4 security recommendations to keep student data safe