News & Analysis as of September 19, 2024

Cybersecurity › Cybersecurity Framework › Data Protection

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

RegFi Episode 42: Beyond the Breach: The CISO’s Role as a Strategic Risk Manager

Orrick, Herrington & Sutcliffe LLP on 7/31/2024

RegFi co-hosts Jerry Buckley and Sherry Safchuk welcome Orrick partner Aravind Swaminathan for a conversation exploring the critical and evolving role of the Chief Information Security Officer in today’s corporate landscape.....more

Hong Kong Proposes a Legal Framework for Regulating Critical Infrastructures

Mayer Brown on 7/24/2024

INTRODUCTION - The acceleration of cyber-attacks on companies in Hong Kong in the last year or so (– with over 60 notifications of such attacks being received by the Office of the Privacy Commissioner of Hong Kong in 2023,...more

How FCA Guidance Aligns With Global Cyberattack Measures

Cadwalader, Wickersham & Taft LLP on 7/2/2024

By March 31, 2025, U.K. firms regulated by the Financial Conduct Authority will be required to have conducted mapping and testing to ensure they remain within their impact tolerances for identified operational risks of...more

NIST Cybersecurity Framework 2.0 Prioritizes Governance and Flexibility

Alston & Bird on 5/7/2024

Earlier this year, the National Institute of Standards and Technology (NIST) issued an update to its Cybersecurity Framework (CSF) with the release of version 2.0, the first update since April 2018 (version 1.1). While the...more

No Password Required: LIVE From Sunshine Cyber Con

Carlton Fields on 5/3/2024

Tamiko Fletcher —CISO at Kennedy Space Center With a Heart of Gratitude Tamiko Fletcher’s career at NASA began in 1999 as a cooperative education student. Her journey to CISO over the following 20 years is nothing short of...more

NIST Adopts New 2.0 Cybersecurity Framework

The Volkov Law Group on 5/2/2024

In the absence of federal cybersecurity and data privacy laws, companies have to look to other sources of guidance, including industry standards, and state laws. The National Institute of Standards and Technology (“NIST”)...more

White House Officials Want State Water/Wastewater Cybersecurity Plans Soon

Nossaman LLP on 4/3/2024

In response to “multiple” cyber threat vectors, the Biden administration has asked governors of all 50 states to generate cybersecurity plans within 90 days (approximately July 1, 2024) to protect local water and wastewater...more

NYDFS Amended Cybersecurity Rules: Overview of Upcoming Deadlines

Akin Gump Strauss Hauer & Feld LLP on 12/20/2023

On November 1, 2023, the New York Department of Financial Services (NYDFS) announced the adoption of amendments to its Cybersecurity Regulation 23 NYCRR Part 500 (“Amended Cybersecurity Rules” or “Amended Rules”). NYDFS...more

Network Topology and Network Mapping: The NIST Cybersecurity Framework – Part 2

Bradley Arant Boult Cummings LLP on 12/6/2023

A previous installment discussed the centrality of network topology to an organization’s data security and outlined the legal framework and obligations incumbent upon many organizations in the U.S. The first installment can...more

NYDFS Finalizes Significant Amendment to Part 500 Cybersecurity Regulation

A&O Shearman on 11/29/2023

On November 1, 2023, the New York State Department of Financial Services (“NYDFS”) issued its Second Amendment (the “Amendment”) to its Cybersecurity Requirements for Financial Services Companies adopted in 2017, codified in...more

NYDFS Expands Cybersecurity Regulations: Extortion Payment Reporting, Corporate Governance, and Technical Requirements

Jones Day on 11/16/2023

A major amendment to the New York State Department of Financial Services' cybersecurity regulations establishes affirmative cybersecurity oversight duties and requires companies to report extortion payments to the agency....more

What You Need to Know About NIST CSF 2.0

Accelerynt, Inc. on 11/13/2023

The National Institute of Standards and Technology (NIST) is updating version 1.1 of the Cyber Security Framework (CSF). Version 2.0 will be released in final form sometime in 2024, but the August 08 working draft of the CSF...more

Client Alert: New York Issues Significant Amendments to its Forward-Leaning Cyber Regulations

Jenner & Block on 11/8/2023

In 2017, the New York Department of Financial Services (“NYDFS”) enacted a landmark regulation requiring financial services institutions such as banks and insurance companies in the state to meet substantial cybersecurity...more

October is Cybersecurity Awareness Month – Takeaways for the Entire Year

Clark Hill PLC on 10/31/2023

This month is the 20th annual Cybersecurity Awareness Month, co-sponsored by the Cybersecurity and Infrastructure Agency and the National Cybersecurity Alliance. This year’s theme is “Secure Our World.” The takeaways from...more

Show Your Work: The SEC Cyber Rules and Documenting Materiality Analysis Under NIST FIPS 199

Baker Donelson on 10/24/2023

The date July 26, 2023, marks the latest evolution of the cybersecurity regulation landscape as the Securities and Exchange Commission passed cybersecurity regulations for publicly traded companies. At the open meeting, SEC...more

EU-US Data Privacy Framework, UK-US Data Bridge Ease Transatlantic Data Transfers

Miles & Stockbridge P.C. on 10/13/2023

Sharing personal data across borders is critical for organizations operating and doing business internationally. Doing so in compliance with data security and privacy laws, however, can be a complex and challenging exercise...more

UK-U.S. data bridge adequacy regulations to come into effect October 12

Orrick, Herrington & Sutcliffe LLP on 9/25/2023

The EU-US Data Privacy Framework (the “Framework”) sets forth a set of principles and requirements that US organizations can comply with and, following certification, be permitted to join the Framework. On October 12, the UK...more

NIST Cybersecurity Framework 2.0 Released for Public Comment

Alston & Bird on 8/30/2023

On August 8, 2023, the National Institute of Standards and Technology (NIST) released the initial draft of its Cybersecurity Framework 2.0 and draft Implementation Examples for public comment. This marks the first significant...more

NIST Issues Cybersecurity Framework 2.0 for public comment

Constangy, Brooks, Smith & Prophete, LLP on 8/28/2023

In early August, the National Institute of Standards and Technology released the initial public draft of its Cybersecurity Framework 2.0. The draft is a long-awaited update to a framework that’s been in place for almost 10...more

The EU-U.S. Data Privacy Framework (DPF): What Does It Mean for You?

Osano on 8/6/2023

If your business transfers data from the European Union to the United States, you’ve likely been keeping an eye on the EU-U.S. Data Privacy Framework (EU-U.S. DPF) for the past several years. The long-awaited adequacy...more

Data Privacy + Cybersecurity Insider - July 2023 - #2

Robinson & Cole LLP on 7/24/2023

CYBERSECURITY - Patch Adobe ColdFusion Vulnerabilities Being Exploited in the Wild ASAP - Adobe has issued alerts on three vulnerabilities affecting its ColdFusion product. The first alert, issued on July 11, 2023,...more

Upcoming EU Rules on Digital Operational Resilience

Pillsbury Winthrop Shaw Pittman LLP on 7/21/2023

There will be additional compliance obligations and mandatory contractual provisions introduced for financial entities and outsourced IT service providers. The new DORA seeks to strengthen the resilience of financial...more

White House Releases National Cybersecurity Strategy Implementation Plan

Epstein Becker & Green on 7/14/2023

On July 13, 2023, the White House issued the first iteration of its National Cybersecurity Strategy Implementation Plan (the “Implementation Plan”), which will be updated annually. The two overarching goals of the...more

The Evolving Partnership: Compliance and Cybersecurity (Part I of IV)

The Volkov Law Group on 7/11/2023

If you ask corporate board members and senior executives to list their number one risk (other than financial operations), the answer in today’s risk environment is clear – cybersecurity and data privacy. The rapid elevation...more

How Can the US Do Better With AI? NIST Offers Recommendations

Fox Rothschild LLP on 7/6/2023

The National Institute of Standards and Technology (NIST)’s National Artificial Intelligence Advisory Committee (NAIAC) recently released its first report to President Joe Biden, providing several key recommendations on how...more

207 Results

/

View per page

Page: of 9

Next »