News & Analysis as of

Cybersecurity › Today's Popular Updates › New Guidance

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +
Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now.   less -
Seyfarth Shaw LLP

The Department of Labor’s Expanded Cybersecurity Guidance: What ERISA Plan Sponsors and Fiduciaries Need to Know

Seyfarth Shaw LLP on

On September 6, 2024, the U.S. Department of Labor (DOL) issued Compliance Assistance Release No. 2024-01, titled “Cybersecurity Guidance Update.” The updated guidance clarifies that the DOL cybersecurity guidance applies to...more

Troutman Pepper Locke

Director of Division of Corporation Finance Issues Guidance on Disclosure of Cybersecurity Incidents under Form 8-K

Troutman Pepper Locke on

On May 21, 2024, Erik Gerding, the director of the Division of Corporation Finance of the Securities and Exchange Commission (SEC), released a statement containing guidance for public companies regarding the disclosure of...more

Sheppard Mullin Richter & Hampton LLP

USPTO Issues Additional Guidance on Use of AI Tools in Connection with USPTO Matters

Sheppard Mullin Richter & Hampton LLP on

The USPTO issued guidance on February 6, 2024 that clarified existing rules and policies and discussed how to apply them when AI is used in the drafting of submissions to the Patent Trial and Appeal Board (PTAB) and Trademark...more

Bass, Berry & Sims PLC

HHS Releases Cybersecurity Performance Goals for Healthcare Organizations

Bass, Berry & Sims PLC on

In response to the number of successful, large-scale ransomware attacks affecting healthcare organizations nearly tripling since 2018, the Department of Health and Human Services (HHS) has released guidance outlining its...more

Davis Wright Tremaine LLP

DOJ, FBI Issue Guidance for Public Companies Seeking to Delay Disclosure of Material Cybersecurity Incidents

Davis Wright Tremaine LLP on

As we discussed in our prior blog post, the Securities and Exchange Commission (SEC) recently finalized its Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure rule for public companies (the "Rule")....more

Ankura

U.S. DOJ’s New Safe Harbor Policy: Conducting Enhanced M&A Due Diligence

Ankura on

Last month, U.S. Deputy Attorney General Lisa O. Monaco announced a new Safe Harbor Policy for voluntary self-disclosure (the “Policy”) made in connection with merger and acquisition activity. The Policy is intended to bring...more

Latham & Watkins LLP

Recent Developments for Directors - October 2023 Edition

Latham & Watkins LLP on

SEC Adopts Final Rules on Cybersecurity Disclosures - The SEC has adopted rules requiring companies to provide disclosure within four business days of determining that a material cybersecurity incident has occurred, and...more

Jones Day

French Law Authorizes Insurability of "Cyber-Ransoms" Paid by Victims, Subject to Prompt Filing of Complaint

Jones Day on

France's Orientation and Programming Law of the Ministry of the Interior ("LOMPI law"), published in the Official Journal of January 25, 2023, amends the insurance coverage of losses and damages paid in response to...more

ArentFox Schiff

Privacy Report- California Exemptions for B2B and Employee Data Set To Expire

ArentFox Schiff on

California Exemptions for B2B and Employee Data Set To Expire - With August 31 marking the last day of the legislative session, the California legislature’s failure to extend business-to-business and employee data exemptions...more

Hogan Lovells

NHTSA issues updated cybersecurity best practices for the safety of modern vehicles

Hogan Lovells on

The National Highway Traffic Safety Administration (“NHTSA”) recently issued updated guidance on cybersecurity best practices for motor vehicle safety. This non-binding guidance demonstrates NHTSA’s continued emphasis on...more

BakerHostetler

‘Unboxing’ the New NIST Guidance: NIST Publishes Significant Update to Healthcare Cybersecurity Guide

BakerHostetler on

​​​​​​​Without question, healthcare providers and the companies that support them operate in an elevated cybersecurity risk environment. And when a cybersecurity incident occurs, the ensuing regulatory inquiries and/or...more

Jenner & Block

DOJ Revises CFAA Charging Policy to Provide Clarity for Cybersecurity Research and Terms of Use

Jenner & Block on

On May 19, 2022, the Department of Justice (DOJ) issued revisions to its existing policy for charging offenses under the Computer Fraud and Abuse Act (CFAA) (2022 CFAA Policy). The revisions state that “good-faith” security...more

Robinson & Cole LLP

Data Privacy + Cybersecurity Insider - May 2022 #2

Robinson & Cole LLP on

CYBERSECURITY NIST - Releases Guidance on Supply Chain Security - The National Institute of Standards and Technology (NIST) Information Technology Laboratory recently released guidance entitled “Software Supply Chain...more

Robinson+Cole Data Privacy + Security Insider

NIST Releases Guidance on Supply Chain Security

Robinson+Cole Data Privacy + Security Insider on

The National Institutes of Science and Technology (NIST) Information Technology Laboratory recently released guidance entitled “Software Supply Chain Security Guidance,” in response to directives set forth in President...more

Foley & Lardner LLP

SEC Directs Public Companies to Evaluate Disclosure Relating to Russia’s Invasion of Ukraine and Related Supply Chain Issues

Foley & Lardner LLP on

On May 3, 2022, the SEC’s Division of Corporation Finance issued guidance through the release of a sample comment letter of public reporting companies’ potential disclosure obligations related to “the direct or indirect...more

Wyrick Robbins Yates & Ponton LLP

Ignore Evolving Security Threats at Your Own Risk: OCR Raises Stakes on Cybersecurity in the Health Care Sector

Wyrick Robbins Yates & Ponton LLP on

OCR’s recent focus on cybersecurity in the health care sector sends a clear message to HIPAA covered entities and business associates: OCR expects you to implement security measures that address known threats to ePHI that are...more

Polsinelli

Federal Banking Regulators Issue New Guidance for Complying with 36 Hour Cybersecurity Incident Reporting Requirement

Polsinelli on

On March 29, 2022, federal banking regulators issued important guidance for how banking organizations can comply with the upcoming requirement to notify regulators within 36 hours of ransomware or other disruptive...more

Sheppard Mullin Richter & Hampton LLP

NIST Releases New Guidance on Software Security and Cybersecurity Consumer Labeling Programs

Sheppard Mullin Richter & Hampton LLP on

NIST recently released several key deliverables relating to cybersecurity. These focus on secure software development and new consumer labeling programs as contemplated by President Biden’s Executive Order 14028, which seeks...more

Robinson+Cole Data Privacy + Security Insider

CISA Warns “Every Organization” in U.S. to Assess + Respond to Cyber Risks

Robinson+Cole Data Privacy + Security Insider on

The Cybersecurity & Infrastructure Security Agency (CISA) recently issued another warning to “every organization” in the U.S. about cybersecurity risks during the ongoing escalation of tension between the U.S. and Russia over...more

Lighthouse

2021 Data Privacy Overview: New Regulations and Guidance

Lighthouse on

While everyone hoped that 2021 would be less tumultuous than 2020, it certainly did not turn out that way in the end. The same was true in the world of data privacy – with sweeping new data protection regulations and guidance...more

Skadden, Arps, Slate, Meagher & Flom LLP

Privacy & Cybersecurity Update - December 2021

Skadden, Arps, Slate, Meagher & Flom LLP on

In this month’s Privacy & Cybersecurity Update, we review the TSA’s new cybersecurity requirements for critical U.S. infrastructure, the White House OMB’s new guidance on cyber incident reporting procedures and the U.S.-U.K....more

Robinson+Cole Data Privacy + Security Insider

CISA Issues Guidance on Protecting Organizations’ Social Media Accounts

Robinson+Cole Data Privacy + Security Insider on

The Cybersecurity and Infrastructure Security Agency (CISA) recently issued guidance on protecting the security of organizations’ social media accounts to reduce the risk of unauthorized access to those accounts....more

King & Spalding

OFAC Puts Virtual Currency Industry On Notice

King & Spalding on

Guidance Demonstrates OFAC’s Expectations for Sanctions Compliance by Cryptocurrency Industry - On October 15, 2021, the Office of Foreign Assets Control (“OFAC”) of the U.S. Department of the Treasury published Sanctions...more

Sheppard Mullin Richter & Hampton LLP

Do You Have a Risk-Based Sanctions Compliance Program?: In the Event of a Ransomware Attack, OFAC Wants to Know

Sheppard Mullin Richter & Hampton LLP on

In the wake of increased ransomware attacks over the course of the last several months, the US Department of Treasury’s Office of Foreign Assets Control (OFAC) has updated a guidance it released last year on potential...more

K2 Integrity

OFAC Releases Updated Ransomware Advisory and Announces First Designation of Cryptocurrency Exchange

K2 Integrity on

On 21 September 2021, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) issued an updated advisory that highlights the sanctions risks associated with making ransomware payments. OFAC reiterated...more

100 Results
 / 
View per page
Page: of 4
Next »

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up Log in
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide