News & Analysis as of May 7, 2025

Cybersecurity › Policies and Procedures › National Institute of Standards and Technology

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

NIST finalizes cybersecurity incident response framework profile aligned with CSF 2.0

Hogan Lovells on 4/15/2025

On April 3, NIST published practical incident response guidance aligned with its CSF 2.0 framework. The guidance outlines best practices in security incident preparation and response for organizations mapped across each of...more

HHS Proposes Changes to Strengthen HIPAA Security Rule

Foley & Lardner LLP on 1/7/2025

Material updates to the HIPAA Security Rule could be on the way — affecting all HIPAA-regulated entities — for the first time in two decades. The Department of Health and Human Services (HHS) issued a Notice of Proposed...more

NIST Publishes Internet of Things Advisory Board Report

King & Spalding on 11/14/2024

In 2021, Congress created the Internet of Things Advisory Board (IoTAB) within the Department of Commerce and charged it with providing advice to the Internet of Things Federal Working Group, a collaboration of Federal...more

Senate AI Working Group Releases Long-Anticipated Roadmap for AI Policy

Akin Gump Strauss Hauer & Feld LLP on 5/17/2024

On May 15, 2024, the Senate AI Working Group—Senate Majority Leader Chuck Schumer (D-NY) and Sens. Mike Rounds (R-SD), Todd Young (R-IN), and Martin Heinrich (D-NM)—issued their long-anticipated Roadmap for Artificial...more

Decoded Technology Law Insights, V 5, Issue 4, May 2024

Spilman Thomas & Battle, PLLC on 5/14/2024

MIT Report Details New Cybersecurity Risks - “Cloud misconfigurations, more sophisticated ransomware, and vendor exploitation attacks are contributing to rising cyberattacks.” Why this is important: Worldwide spending...more

White House Issues Executive Order on AI: Charting a Path to Responsible AI Development

Neal, Gerber & Eisenberg LLP on 11/3/2023

On October 30, 2023, recognizing that Artificial Intelligence (AI) holds both extraordinary promise for its commercial applications and advancements and treachery and harm caused by its misuse, the White House issued an...more

Privacy Briefs: October 2023

Health Care Compliance Association (HCCA) on 10/6/2023

Report on Patient Privacy 23, no. 10 (October, 2023) Kaiser Foundation Health Plan Inc. and Kaiser Foundation Hospitals will pay California $49 million to resolve allegations that they unlawfully disposed of hazardous waste,...more

What is an Information Security Framework and Why Do I Need One?

J.S. Held on 6/7/2023

An information security framework, when done properly, will allow any security leader to more intelligently manage their organization's cyber risk. The framework consists of a number of documents that clearly define the...more

HIPAA Security Rule: What are “Recognized Security Practices” and why are they important?

Woods Rogers on 11/10/2022

A strong cybersecurity program can help defend against cyber attacks and protect sensitive patient data. Thanks to a 2021 amendment of the HITECH Act, when a breach occurs, it can also reduce enforcement penalties. The...more

U.S. and British Law Enforcement Agencies Issue Unprecedented Warning About Chinese Espionage Efforts

Foley & Lardner LLP on 7/12/2022

On July 6, 2022, the heads of the U.S. Federal Bureau of Investigation (FBI) and the British MI5 law enforcement agencies issued an unprecedented joint statement warning about espionage and other economic threats from China....more

Prioritizing Privacy Programs Based on the NIST Privacy Framework

Ankura on 2/23/2022

Over the span of five months in 2021, our team published a series of articles on how to implement the five core functions of the National Institute of Standards and Technology (NIST) Privacy Framework. We wrote an initial...more

Updates Announced to Department of Defense Cybersecurity Certification Program

Sheppard Mullin Richter & Hampton LLP on 11/11/2021

The Department of Defense (DOD) recently announced several changes to its Cybersecurity Maturity Model Certification program. The program applies to those who serve as contractors and suppliers to the DOD. As described in our...more

CMMC Is Coming: How Government Contractors Can Prepare

NAVEX on 4/14/2021

People like to say that cybersecurity threats are constantly evolving. So perhaps it’s fitting that cybersecurity compliance is undergoing a significant evolution of its own this year, too. That evolution is the arrival of...more

4 Things to Know About Updated NIST 800-53 Standards

NAVEX on 3/31/2021

[author: Matt Kelly] In September 2020 the National Institute of Standards and Technology (NIST) unveiled the fifth version of its cybersecurity standard formally known as SP 800-53, “Security and Privacy Controls for...more

“Internet of Things” Guidance to be Added to Cybersecurity Requirements for Agencies and Federal Contractors

Sheppard Mullin Richter & Hampton LLP on 4/30/2019

In 2019, cybersecurity has become top-of-mind for most federal government contractors and agencies that share sensitive information. In addition to updated Department of Defense guidance and procedures for evaluating...more

Ohio Gives Breach Safe Harbor for Companies with Written Data Security Program

Sheppard Mullin Richter & Hampton LLP on 10/30/2018

Effective November 2, 2018, companies that suffer a breach may have certain defenses in Ohio if they have a written cybersecurity program in place. Under this new law, companies can use as an affirmative defense the existence...more

DoD Issues New Guidance to Drive Compliance with NIST 800-171 Cybersecurity Requirements

White and Williams LLP on 5/3/2018

Is this a Start of Something New for Third-Party Management? The demand for responsible cybersecurity in business is ubiquitous. The need to protect information is not limited to the financial services, insurance and...more

17 Results

/

View per page

Page: of 1