News & Analysis as of May 5, 2025

Cybersecurity › Data Protection › Federal Information Security Modernization Act (FISMA)

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

OIG releases 2024 audit of the Fed’s information security program

Orrick, Herrington & Sutcliffe LLP on 11/20/2024

On October 31, OIG for the Fed and the CFPB released its 2024 Audit of the Board’s Information Security Program. The audit found that the Board’s information security program continues to operate at a level-4 (managed and...more

New Connecticut Law Incentivizes Adoption of Cybersecurity Standards

Fox Rothschild LLP on 11/2/2021

In July, Connecticut passed a largely unnoticed new law that followed in the footsteps of Ohio and Utah in limiting damages or creating affirmative defenses for business that experience a data breach after implementing a...more

Hold the punitive damages: Connecticut is latest to incentivize implementing cybersecurity frameworks

Hogan Lovells on 10/1/2021

Connecticut’s new cybersecurity standards law, which goes into effect on October 1, 2021, protects companies from punitive damages in certain data breach actions where an organization has a cybersecurity program that conforms...more

Ohio Enacts First Cybersecurity Safe Harbor

Womble Bond Dickinson on 11/7/2018

Tacking an entirely new direction from other US states, Ohio has decided to offer defensive legal protection to businesses who have built a cybersecurity regime around well-known industry standards, even where those...more

Ohio Proposes Act to Incentivize Consumer Data Security

Benesch on 11/21/2017

Legislation was recently introduced in Ohio encouraging businesses to take steps in protecting consumer data. Ohio Senate Bill 220, The Data Protection Act (the “Act”), provides businesses that take certain commercially...more

Orrick's Financial Industry Week In Review

Orrick, Herrington & Sutcliffe LLP on 1/13/2017

Financial Industry Developments - Prohibition on Dealing or Investing in Industrial or Commercial Metals - On January 3, 2017, the Office of the Comptroller of the Currency (the "OCC") finalized a rule that...more

Alert: Congressional Hearings and NIST Publication Continue Focus on IoT Security

Cooley LLP on 11/29/2016

Two actions in the past few weeks reflect the continuing government involvement in and concern over the security of Internet of Things (IoT) devices. Attacks using connected devices have highlighted security vulnerabilities...more

Under the Thumb: Regulatory Compliance When Outsourcing Cybersecurity Management

Pillsbury - Global Sourcing Practice on 8/27/2015

Managed security services are often a natural “add-on” when outsourcing IT services given that data protection is integral to application development, software as a service, and cloud storage, among other services. More...more

OIG issues report on CFPB information security system

Ballard Spahr LLP on 12/10/2013

The Bureau’s Office of Inspector General (OIG) (which it shares with the Fed) recently issued its 2013 report card on the CFPB’s information security system. While the OIG states in the audit report that the CFPB has made...more

US Legislative Cybersecurity Update

Mintz - Privacy & Cybersecurity Viewpoints on 4/18/2012

Monday, April 23, will begin Cyber Week, during which up to six different bills that focus on various aspects of cybersecurity may be considered on the House floor. The Rules Committee has not yet determined how the bills...more

10 Results

/

View per page

Page: of 1