News & Analysis as of

Incident Response Practice Tip: Balance Meeting Breach Notification Deadlines With Securing Your Network

State breach notification statutes are being amended on almost a monthly basis. Several laws have, or will soon have, a mandatory notification deadline for notifying affected individuals after the discovery of the incident....more

The OMB’s New Cybersecurity Guidance for Federal Contractors

Is Controlled Unclassified Information Out of Control? The OMB apparently thinks so. On August 11, 2015, the Obama administration, through the Office of Management and Budget (OMB), which is the largest office within the...more

Government Websites With Cybersecurity Tips & Information

As part of the government’s recent clarion call to improve our individual and collective cybersecurity posture, several federal and state agencies have released a variety of guidelines, frameworks, best practices and tips. ...more

NIST Guide Highlights Cybersecurity Considerations for Utilities and Manufacturing Companies

In 2013 alone, the U.S. Department of Homeland Security (DHS) and its Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) responded to more than 256 cyber-incident reports—more than half of them in the energy...more

German Parliament's IT-Security Act Covers Critical Infrastructure

On June 12, 2015, the German Parliament (Deutscher Bundestag) passed an Act to Improve the Security of Information Technology Systems ("IT-Security Act"). The new legislation requires operators of so-called critical...more

Congress Confirms NIST’s Role in Cybersecurity – and the Continuation of the Cybersecurity Framework

The Cybersecurity Enhancement Act of 2014 (CEA) was passed by the House and the Senate on December 11th, and signed by the President on the 18th. The bill formalizes the role of the National Institute for Standards and...more

Cybersecurity Legislation Focuses on Federal Government Initiatives – Leaves Private Sector Reforms for 2015

One of the few things the parties in Congress can agree upon these days is cybersecurity – at least when it comes to directing the federal government’s cyber activities. In its final days, the 113th Congress reached agreement...more

Congress Passes The Federal Information Security Modernization Act of 2014: Bringing Federal Agency Information Security into the...

The Federal Information Security Modernization Act of 2014 (FISMA) was passed by the Senate on December 8th, by the House on December 10th, and by the President on December 18th. It is a comprehensive bill intended to bring...more

California Bill Would Create Cyber Security Commission

In recognition of the increasing threat that cyber-attacks pose to the state's infrastructure and the considerable costs that government and private sectors are estimated to spend on cyber security (more than $70 billion...more

Privacy & Cybersecurity Update - February 2014

In This Issue: - NIST Releases Final Framework Document ..Key Changes From The Preliminary Framework ..The Framework Roadmap ..The DHS “C-Cubed” Program ..Next Steps - California Suggests Upper...more

"Privacy & Cybersecurity Update: NIST Cybersecurity Framework: Preliminary Draft Issued"

On October 22, the National Institute of Standards and Technology (NIST) issued its Preliminary Cybersecurity Framework (the Preliminary Framework). The Preliminary Framework represents the first full draft of the...more

"Cybersecurity Update: Key US and EU Regulatory Developments"

In recent months, federal and state governments have taken an increasingly active role in reviewing cybersecurity issues within the private sector. There has been a flurry of activity as different government bodies discuss...more

White House Issues Executive Order on CyberSecurity

The Obama Administration has long expressed concerns about the vulnerability of America’s critical infrastructure to cyber-attack. On February 12, 2012, the day of the President’s State of the Union address, the...more

What The Cybersecurity Executive Order Means For The Rest Of Us

If you are the CEO of Google, Facebook, Verizon, Comcast, Exxon or Boeing, don’t read this. You have a team of lawyers working for you who have already spent hours analyzing President Obama’s Cybersecurity executive order...more

What You Should Be Doing Now to Prepare for Implementation of the Cybersecurity Executive Order

A tempting response to the Cybersecurity Executive Order (the "Order"), announced by President Obama at his State of the Union address, is to ignore it. It is vague in key particulars, such as which companies are part of the...more

Executive Order Begins Process Of Strengthening Nation’s Cybersecurity And Critical Infrastructure

During his State of the Union address on February 12, 2013, President Barack Obama announced his signing of a long-anticipated Executive Order on cybersecurity. After months of discussions with technology companies the...more

New FAR Rules Likely For "Critical Infrastructure" Contractors

On February 12, 2013, President Obama signed an Executive Order (the Order) intended to enhance the cybersecurity of the country's critical infrastructure. According to the Order, "[t]he cyber threat to critical...more

Utilities Sector To Be a Focus of Executive Order Directing Development of Critical Infrastructure Cybersecurity Framework

Little more than a week after reports of cyber attacks targeted at the Department of Energy, The New York Times and The Wall Street Journal, President Obama declared in his State of the Union address that these forms of...more

President Obama Issues Executive Order on Cybersecurity

On February 12, 2013, President Obama issued a long-anticipated Executive Order concerning cybersecurity entitled Improving Critical Infrastructure Cybersecurity. The Executive Order marks a major milestone in the Federal...more

Summary of Executive Order On Improving Critical Infrastructure Cybersecurity

Overview - Identification of Critical Infrastructure. Not later than July 12, 2013, the Secretary of Homeland Security is directed to identify critical infrastructure where a cybersecurity incident could result in...more

Addressing the Cyber Threat: Cybersecurity Executive Order Issued and CISPA Introduced

The long-awaited executive order entitled “Improving Critical Infrastructure Cybersecurity” was issued on Tuesday, along with a companion Presidential Policy Directive and mention by the President in the State of the Union...more

President Obama Signs Executive Order on Cybersecurity

Order will create a voluntary Cybersecurity Framework for designated critical infrastructure within a year. On February 12, President Barack Obama signed an executive order directing the Department of Homeland Security...more

President Obama Issues Long-Awaited Cybersecurity Executive Order

As President Obama delivered his fifth State of the Union speech to Congress on February 12, 2013, he simultaneously issued a highly anticipated Executive Order (“the Order”) focused on improving cybersecurity in the United...more

President Signs Cybersecurity Executive Order

“America must … face the rapidly growing threat from cyber-attacks. Now, we know hackers steal people’s identities and infiltrate private emails. We know foreign countries and companies swipe our corporate secrets. Now our...more

Executive Order and Policy Directive Promotes Cybersecurity Cooperation and Intelligence Sharing

On February 12, 2012, President Obama signed an Executive Order as well as a complementary Presidential Policy Directive intended to improve the flow of information and cyber-threat intelligence between government agencies...more

30 Results
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:

Sign up to create your digest using LinkedIn*

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.