INTERIM. 3 Reasons Old Data is Still Valuable to Hackers.

  • passwords are valuable because we don’t change them and use them on multiple account
  • its data mining material to engineer more information about your identity
  • a hacker can use 4 year old LinkedIn data for their own illegal purposes, and 4 years later sell it openly on the black market. 

IT Pro Portal | Why four-year-old data is more valuable than you think

 

TREND. Move Infrastructure back to Old School to Thwart Breaches.

What cyber security threat could be helped by old school methods? Electric Grid Security

Who is proposing old school solutions? 4 U.S. Senators: King, Heinrich, Risch, Collins

What does the legislation call for? 

  • 2 year study
  • examinging technology that makes the grid vulnerable
  • how the automated systems can be hacked remotely
  • “reengineer the last mile of the energy grid  to isolate its most important systems”

The Hill | Senate bill would encourage ‘retro’ grid security approach 

TREND. Government Calls on Hackers to Help.

What is civic hacking? hackers doing good to solve governmental problems

How does it work? The feds listed 16 issues that it needs helps with and called for a National Day of Civic Hacking. Examples include:

  • application process for food stamps, business licenses, criminal record copies, business licenses, affordable housing, 
  • developing a community platform for California’s Health and Human Services Commission

Code for America | 4th Annual National Day of Civic Hacking 

Anatomy of a School District Data Breach. 5 Things the School District Did to Respond.

Which school district experienced a data breach of its W-2 data, and all data retlated to persons who have received payment from the school district? Concord, N.H.

When did the breach occur? April

How did the breach occur? Social engineering, a targeted approach in which the hacker masquerades as the superintendent soliciting information

Did the data breach result in the information being used? Yes, false tax returns were filed based on the hacked information

When did the school district discover the data breach? June 1st

When did the school district notify persons that their personal information was compromised? June 3rd

What 3 things did the notification suggest people do to protect their information?

  •  Contact your personal banking institution(s) to make them aware of this breach; 
  •  Register for a fraud alert; 
  •  Contact institutions that hold any personal assets to make them aware of this breach.

Lege Trend. Ransomware State Legislation. 3 Key Pieces of Intel. Read the Legislation.

What is ransomware? A data security attack that freezes computer data, but leaves the business, such as a hospital, otherwise functioning so that services are not disrupted. A ransom is  asked for and in exchange the data is liberated.

What statutes are states amending? Computer crimes to apply extortion to computer violations

What specific statutory tweaks is California considering after ransomware attacks at California hospitals?

  • defines ransomware
  • makes it a crime to use ransomware
  • the criminal offense is punishable by 2-4 years in jail and a $10,000 fine

California Senate Bill 1137

Health IT Security | How Ransomware Affects Hospital Data Security

TREND. Ransomware. Hospitals. 2016 the year of ransomware.

3 pieces of ransomware intel critical to hospital data security:

  • Institute for Critical Infrastructure Technology calls 2016 the year of ransomware
  • Targets for ransomware are mobile devices and connected medical devices that offer access points for unauthorized users
  • States are passing anti-ransomware legislation
    • College of Healthcare Information Management Executives support stronger hospital specific ransomwate legislation

Health IT Security | How Ransomware Affects Hospital Data Security

Data Breaches. Construction Industry. 3 Pieces of Intel.

  • Data breaches are costly
    • ​internal costs related to security improvements, mitigation & notification
    • regulatory costs
    • costs arising from 3rd party claims
  • Identify risks, which for construction include:
    • ​file sharing with subcontractors
    • espcially for projects critical to infrastructure- hospitals, roads, energy facilities, governmetn facilities
  • Cyber Insurance to help your business cover costs

Miami Herald | Cyberattacks can cripple the construction industry

INTERIM. Data Security. Health Care. White House Proposal. 3 Pieces of Info to Keep you Informed.

What White House Proposal on data security affecting health care? On May 25, 2016 the White House released its final Data Security Policy Principles and Framework (Security Framework) for President Obama’s Precision Medicine Initiative (PMI).

What are the goals of the White House data security proposal?

  • Build patient trust
  • Adapatable security protocols
  • Dependable data preservation
  • Identify risks
  • Transparency with patients
  • Responsibility
  • Sharing. Collaboration

What requirements do the goals translate into?

  • Have comprehensive security plans
  • Utilize risk maangement approaches to data security
  • Utilize periodic 3rd party reviews of data security
  • Establish access controls for data
  • Train your staff
  • Employ encryption
  • Audit for Threats &  Share threats

White House | Precision Medicine Initiative and Data Security

White House | PMI Security Principles 

 

TREND Consumer Protection Agencies. Corporate Privacy Policies. New Regulations.

Who:     Federal Trade Commission

What:    Amendments to how companies disclose privacy policies & information to consumers

When:     Begins this fall

Standard of Review: The FTC favors corporate disclosures to consumers that are:

  • shorter
  • clearer
  • easier-to-use

The Hill | Consumer protection agency to look at disclosure issues