Cybersecurity Framework

News & Analysis as of

Solving the Legal Challenges of Trustworthy Online Identity

In this age of phishing, hacking, identity fraud, and other forms of cybercrime, answering two simple questions – “Who are you?” and “How can you prove it?” – is fast becoming a critical requirement for online business...more

The Government's Strategy to Combat the "Cyber Arms Race"

In the midst of ongoing, escalating and increasingly troublesome reports of large-scale corporate cyber breaches, the federal government is trying to fight back more forcefully with a dual strategy to shore up agency...more

The Private Sector’s Role in the New Face of Homeland Security

The Obama administration recently announced the creation of the Cyber Threat Intelligence Integration Center (CTIIC), a new governmental agency created to prevent cyber threats by analyzing and integrating digital...more

GAO Puts Cybersecurity and Privacy High Atop High Risk List

Agency Assessment Comes as President Signs Executive Order Increasing Cyber Sharing with the Private Sector Late last year, this post speculated whether 2015 would become “the Year of Cybersecurity.” Though 2015 is still...more

White House Holds Cybersecurity Summit at Stanford University

On Friday, February 13, 2015, President Obama delivered the keynote speech and signed an executive order on cybersecurity information sharing at the White House cybersecurity and privacy summit held at Stanford University. ...more

White House Creates New Federal Agency To Combat Cyber-Threats

The White House, on February 10, 2015, announced the creation of a new federal agency, the Cyber Threat and Intelligence Integration Center (“CTIIC” or the “Center”), to combat cyber-threats by coordinating digital...more

Update on President Obama’s “Summit on Cybersecurity and Consumer Protection,” Part II: The Executive Order

As a follow up to our summary of the key takeaways from the White House’s first Summit on Cybersecurity and Consumer Protection, the centerpiece of which was President Obama’s signing of a new Executive Order, “Promoting...more

President Obama Issues Executive Order Promoting Private Sector Cybersecurity Information Sharing

On Friday, February 13, 2015, President Obama signed an executive order, Promoting Private Sector Cybersecurity Information Sharing (the “EO”), designed to encourage private companies to share information regarding threats to...more

Is 2015 the Year of Data Protection?

The growing frequency, impact and sophistication of cyberattacks in the U.S. and abroad have highlighted the need to address America's lack of a unified federal cybersecurity framework. No single congressional committee or...more

NIST Releases Guidelines for Vetting the Security of Mobile Applications Used by Businesses and Their Employees

Companies and their employees are increasingly using mobile devices and mobile applications (apps) to improve connectivity, communication and productivity. Unfortunately, these same companies may be unintentionally exposing...more

Farewell, Federal Cybersecurity Incentives?

Administration Takes Private Sector Incentives Off the Table, While Obama Calls for $14 Billion in FY 2016 Budget to Strengthen Government’s Cybersecurity Efforts The White House’s Cybersecurity Coordinator Michael...more

President Obama Announces New Cybersecurity Proposals

On January 13, President Obama visited the National Cybersecurity and Communications Integration Center to announce a variety of legislative and administrative proposals, many of which were updates to his 2011 Cybersecurity...more

A New Kind of Architecture: The President’s New Agenda on Cybersecurity

If you watched President Obama’s State of the Union Address on January 20, you know that passing comprehensive cybersecurity legislation will be a central focus during his final two years in office. The President actually...more

World Economic Forum Releases Framework to Quantify Cyber Threats

In conjunction with its annual meeting this week, the World Economic Forum released a report on its current efforts to develop a common framework to model and quantify the impact and risk of cyber threats. The report...more

Sharing is Caring: The OCC Testifies Before the Senate Banking Committee

On December 10, 2014, Valerie Abend, Senior Critical Infrastructure Officer for the Office of the Comptroller of the Currency (OCC) testified before the U.S. Senate Committee on Banking, Housing, and Urban Affairs on the...more

The Merchant Financial Cyber Partnership Issues Cybersecurity Recommendations

The Merchant Financial Cyber Partnership (“the Partnership”) recently released eight recommendations aimed at enhancing the data security of the payments system across the merchant and financial industries. The Partnership...more

Congress Confirms NIST’s Role in Cybersecurity – and the Continuation of the Cybersecurity Framework

The Cybersecurity Enhancement Act of 2014 (CEA) was passed by the House and the Senate on December 11th, and signed by the President on the 18th. The bill formalizes the role of the National Institute for Standards and...more

An Update on the Cybersecurity Framework and Action Items for NIST

The National Institute of Standards and Technology (NIST) recently released an update on its Framework for Improving Critical Infrastructure Cybersecurity (The Framework). The Framework was first issued in February 2014 as a...more

Alert: Congress Ramps Up Cyber Legislation Activity: Four Bills Await President Obama's Signature

After years of pundits saying "oh, major cyber legislation will pass this year," it may finally be happening. Last week Congress hammered out details on four different cyber bills that are intended to help the country move...more

Intro to Cybersecurity Framework: New Mandatory NIST Standards for Government Contractors?

Cybersecurity remains one of the most important and least understood issues of the day. Last week, the National Institute of Standards and Technology (NIST) hosted a workshop in Tampa, Florida, to receive private sector...more

SIFMA Issues Cybersecurity Regulatory Principles

Does everyone feel compelled to comment on cybersecurity issues? It seems that way. And on October 20th the Securities Industry and Financial Markets Association jumped deeper into the fray when it issued its Principles for...more

Cybersecurity Litigation Monthly Newsletter

As we described in July and September, P.F. Chang’s was hit with three putative class actions following its announcement of a point-of-sale data breach. On August 29, P.F. Chang’s moved for dismissal of the first two cases,...more

A Different Kind of “Virus”: FDA Follows NIST Framework in Cybersecurity Guidance for Medical Devices

In past posts we’ve taken a close look at the Framework for Improving Critical Infrastructure Cybersecurity put forth by the National Institute of Standards and Technology (NIST), exploring its wide-ranging implications for...more

NIST RFI to Solicit Feedback on Cybersecurity Framework Closing: Good Opportunity to Assess Suggestions and Concerns

On Friday, October 10th, an opportunity to submit comments on a Request for Information concerning awareness and implementation of the “Framework for Improving Critical Infrastructure Cybersecurity” closes. Companies of all...more

Intel Committee Chief Says Cyber Bill Could Face Two-Year Wait

On September 19, 2014, House Intelligence Committee Chairman Mike Rogers followed up on comments he and Senate Intelligence Committee Vice Chairman Saxby Chambliss made last week concerning the prospects for cybersecurity...more

126 Results
|
View per page
Page: of 6