INTERIM. Ride Share Data. Private Data Shared with Government. 3 Key Intel to Be Informed.

Where did the ride share data report originate? UBER produced its first ever transparency report

The numbers of data requests from July 2015 to December 2015:

  • 33 requests from government agencies
  • 11,644,000 riders affected
  • 583,000 drivers affected
  • California, NYC, and Chicago governmental entities requested the most data
  • 517,000 riders & 14,000 drivers impacted by a Houston, TX data request
  • 370 riders & 370 drivers impacted by a San Antonio, TX data request

Uber | Transparency Report 

INTERIM. 2 Problems for Business. Golden State Data Security Laws.

  • Liability. did the data security standards create a lawsuit free for all because of the security standard minimum?
  • Security Standards required for businesses.
    • the laws calls for reasonable standards
    • the Attorney General reported that Critical Security Controls created by the  Center for Internet Security should be the minimum

WallStreet Journal | Are California’s New Data Security Standards a Recipe for Liability?

INTERIM. Lege Trend: Data Security by Modernizing Government Computer Systems. 4 Key Informed Intel + Procurement.

Which legislative body is considering data security from the angle of improving existing computer infrastructure in government? Congress

What’s the cost associated with modernizing government computers? $ 3.1 Billion.

Bonjour procurement opportunities.

What’s the argument supporting infrastructure investment? “If we do not invest in our technology and cybersecurity now, we will have no one to blame for the next data breach but ourselves,” Rep. Ted Lieu (D-Calif.)

How will the funding operate? 

  • The $3.1 billion will go into the Information Technology Modernization Fund
  • Self-sustaining investment fund
  • Allows for innovative & rapid upgrades to outdated & vulnerable IT systems
  • Creates support for future federal technology infrastructure 

The Hill | House Dem stumps for Obama’s tech modernization push

Legal Trend: General Liability Insurance Cover Data Breach Liabilities. 3 Bits Informed Intel.

What have state courts been saying across the country about data breach insurance? General Liability policies don’t cover data breaches

What happened this week to alter this legal trend? The U.S. Fourth Circuit Court of Appeals in Virginia found that a ageneral liability policy covered a data breach

What does the insurance company say? The 4th Circuit Court of Appeals got it wrong. General liability policy that covered “electronic publication of material” with “unreasonable publicity” is not a data breach policy

SC Magazine | Federal court bucks trend, rules general liability insurance covers data breach

 

Lege Trend: Requiring Tech Companies to Decrypt. Read the Bill. Plan your Strategy.

What state legislature considered a bill to fine companies that do not decrypt after receiving a court order? California

What happened to this bill to fine companies? Died in committee without a vote

What did opponents to the bill say?

  • forced decryption weakens security and personal privacy
  • “Do we have a world where there’s no privacy whatsoever for the average citizen?
  • Assuming that this body is OK with every agency in the U.S. having access to everything, every application, every phone … are we OK then with the government of Russia having it? China? Iran?
  • Because once a backdoor is created, a backdoor exists.”

Who supports the bill? law enforcement

Who opposes the bill? Civil libertarians and tech companies
California Assembly Bill 1681

The Recorder | State Lawmakers Reject Decryption Bill

INTERIM. Millions in Costs for Data Breach in Dallas County

When did Dallas County have a data breach? In December 2015, it came to light that Dallas County had left personally identifiable information from 10s of 1000s accessible online for more than a decade.

How much does an average data breech cost to remediate? $80 per record. If it exposed 50,000 records that is a $4 million remediation minimum.

How does the remediation cost cover for Dallas County?

 

Tech & Privacy Interests Do Not Like Data Security Legislation. 3 Keys Informed Intel

  • Tech & Privacy Interests don’t like provisions forcing technical assistance to government investigations
  • Why the hestiancy over forced assistance? It will lead to greater data insecurity
  • Ties the hand of businesses that want to provide their customers greater security

The Hill | Encryption bill draft worries tech community

CNET | Encryption bill would force companies to surrender user data

West Coast State New Data Security Agency. Key Informed Intel. Read the Legislation. Find Procurement Opportunities for Texas.

  • The Bill creating the Washington State’s new Office of Privacy and Data Protection: Washington State House Bill 2875
  • What will be the purpose of the new Office of Privacy & Data Protection?
    • ​Determine what information state agencies are collecting
      • Do we know in Texas? No
    • Work with agencies to reduce the amount of consumer data being collected
    • Monitor & assist wit citizen complaints
    • Annual privacy review of state data collection
    • Educate Washington State residents about consumers about privacy protection

University of Washington Today | UW law students lay groundwork for new state privacy office

INTERIM. Cyber Security and Higher Ed. New Study. 3 Reasons its Bad for a Cyber Secure Future.

CloudPassage has a new report on cybersecurity and high education institutions. Here’s the big picutre:

  • None, Zero, Zilch, Nien of the Top 10 Computer Science programs in the country require security courses to graduate
  • Of the Top 26 computer science programs, only #12 Michigan requires cyber security
  • In 2015, there were 200,000 OPEN computer security positions in the U.S.

Why the lack of focus on cyber or data security among undergrads?

  • Its been pushed as a niche area for graduate programs
  • not enough graduate students are pursuing cyber security
  • there is more of deamnd for “flashy” computer science programmers who can build apps

SC Magazine | Cybersecurity being overlooked by American universities: Report

All the State Budget Data Security Items. Procurement. Procurement. Procurement.

In Legislative Appropriation Request Trends:

  • 3rd party contracts to assess security at agencies
  • HB 2783 (2013) required a study to see if agency computer systems were legacy.
    • Hello, 3rd party contracts to replace or upgrade legacy systems
    • Legacy systems are a higher security risk
    • Over 1/2 agency computer systems are

In 2015’s State Budget:

  • Article IX, Section 9.10 : DIR prioritization of state agencies’ cybersecurity projects
  • Article IX, Section 9.11, Cybersecurity Initiatives 
    • ​10 agency focus to improve data security by coordination & bulk purchasing:

                  (1)  Department of Aging and Disability Services;

    1. (2)  Department of Assistive and Rehabilitative Services;

    2. (3)  Department of Family and Protective Services;

    3. (4)  Department of State Health Services;

    4. (5)  Health and Human Services Commission;

    5. (6)  Higher Education Coordinating Board;

    6. (7)  Office of Court Administration;

    7. (8)  Parks and Wildlife Department;

    8. (9)  Department of Insurance; and

    9. (10)  Department of Licensing and Regulation. 

    10. Strategy A.1.3, Statewide Security for DIR funding for statewide security policy & procedures 

    11. Strategy C.2.2.NetworkandTelecommunicationsSecurityServices  

      Strategy B.3.1, Statewide Cyber Security Services  for DIR risk managment & 3rd party security assessments

       

      LBB | Overview of Cybersecurity Provisions in the 2016-17 General Appropriations Act