Popular, Data Security, Vendors

Decoded: Technology Law Insights - V 4, Issue 4, April 2023

Spilman Thomas & Battle, PLLC on 4/25/2023

Tech Vendors and Cybersecurity – Are They Responsible? It has long been recommended that when you contract with a technology vendor that you include an indemnity clause in the contract wherein the vendor will indemnify you...more

[Webcast Transcript] You’ve Got to Move It: Data Protection and Privacy with Cross-Border Transfers

HaystackID on 6/29/2022

...This session, led by industry-acknowledged experts in areas ranging from data protection and privacy to data transfer and legal discovery, provided a professional forum for the explanation of the best approaches,...more

[Webinar] Privacy and Cybersecurity Contracting: What’s the “Deal”? - June 29th, 12:00 pm - 1:00 pm EDT

McDermott Will & Emery on 6/10/2022

Security Schedules, Privacy Addenda, TOMs, DPAs—whatever you call them, privacy and cybersecurity contract terms have exploded in prevalence in recent years, bringing with them new importance that can lead to difficult and...more

SOC Reports Provide Critical Insights on Vendor Data Security Practices

Esquire Deposition Solutions, LLC on 6/2/2022

I’ve written several times during the past year about the importance of information security for legal professionals. Mitigating the threat of unauthorized access to client confidential information is one of the most...more

[Webinar] Cybersecurity Basics for Legal Practitioners - April 19th, 1:00 pm - 2:00 pm EDT

Association of Certified E-Discovery... on 4/5/2022

Join us for a webinar on basic cyber information regarding data protection, data privacy, cybersecurity requirements PII and Sensitive PII, cybersecurity requirements for Third Party vendors, Cyber insurance in the age of...more

[Webinar] Vendor Risk Management in the Modern Economy - July 28th, 1:00 pm - 2:00 pm EST

Ankura on 7/12/2021

Organizations are becoming increasingly reliant on external parties to manage parts of their business, including their critical and sensitive data. While the specialized expertise and economies of scale that third parties and...more

4 Things to Know About Updated NIST 800-53 Standards

NAVEX on 3/31/2021

[author: Matt Kelly] In September 2020 the National Institute of Standards and Technology (NIST) unveiled the fifth version of its cybersecurity standard formally known as SP 800-53, “Security and Privacy Controls for...more

Third-Party Risk Management: 5 Reasons to Monitor Cybersecurity Risk in Real Time

NAVEX on 2/1/2021

In today’s business landscape, it is nearly impossible to work alone. You have to collaborate with clients, vendors, suppliers, specialists, and plenty of other partners all considered third parties to your organization. As a...more

SEC Releases Cybersecurity and Resiliency Observations: A Potentially Useful Guide for Businesses

Hogan Lovells on 2/7/2020

In today’s connected world, businesses face constant pressure to improve their cybersecurity practices and to confirm that they are meeting industry standards. To continue helping businesses achieve those goals, the SEC...more

SEC Examiners Release Cyber Observations: What You Need To Know

Bracewell LLP on 2/6/2020

On January 27, 2020, the SEC’s Office of Compliance Inspections and Examinations (OCIE) announced its most recent Cybersecurity and Resiliency Observations. This report highlights specific practices that have been, and can be...more

Lessons Learned from the Capital One Data Breach (Part I of III)

The Volkov Law Group on 9/10/2019

Not to say, I told you so, but around the same time that the Capital One data breach occurred, I was reminding clients that nearly half of all significant data breaches or cyber-incidents occur because of internal actors. ...more

Cloud Storage and Use of Vendors for Records Management Flagged by OCIE in Alert

Kilpatrick on 5/30/2019

Regulations regarding privacy, cybersecurity and the use of technology seem to be in constant flux. Compliance consultants and vendors do their best to stay on top of them, but ultimately neither are regulated by the SEC,...more

U.S. Securities and Exchange Commission Issues Risk Alert Regarding Safeguarding Customer Records and Information Stored on...

Faegre Drinker Biddle & Reath LLP on 5/29/2019

On May 23, 2019, the United States Securities and Exchange Commission (“SEC”)’s Office of Compliance Inspections and Examinations (“OCIE”) issued a Risk Alert entitled “Safeguarding Customer Records and Information in Network...more

“Internet of Things” Guidance to be Added to Cybersecurity Requirements for Agencies and Federal Contractors

Sheppard Mullin Richter & Hampton LLP on 4/30/2019

In 2019, cybersecurity has become top-of-mind for most federal government contractors and agencies that share sensitive information. In addition to updated Department of Defense guidance and procedures for evaluating...more

SEC Warns Registered Firms about Client Privacy and Data Security

Akin Gump Strauss Hauer & Feld LLP on 4/29/2019

• The SEC released a Risk Alert summarizing key areas in which it continues to see compliance deficiencies related to Regulation S-P, the primary SEC rule regarding privacy notices and safeguard policies of investment...more

Interesting Cybersecurity Development in the Insurance and Vendor Risk Arena

Burns & Levinson LLP on 4/3/2019

Often one of the benefits of working with a capable cyber risk broker or insurer is that the covered business has access to supplemental services ranging from security assessments to budget-priced post-incident legal support....more

SEC To Focus on Cybersecurity in 2019

Sheppard Mullin Richter & Hampton LLP on 3/28/2019

For the fourth year running, the Securities and Exchange Commission’s Office continues to list cybersecurity as one of the top enforcement priorities for 2019. As it relates to cybersecurity, the SEC will be focusing on...more

Should Companies Terminate Third Party Vendors That Cause A Data Breach?

Jackson Lewis P.C. on 3/5/2019

According to reports, bank customers in Australia (yes, data breach notification requirements exist down under) have been affected by “an industry-wide” data breach experienced by a third-party service provider to the banks –...more

Privacy and Data Security Strategies for Start-Up Companies

Foley Hoag LLP - Security, Privacy and the... on 1/23/2019

Start-up companies know that, when potential investors kick the tires, they will look carefully at the company’s business model and IP portfolio. These days, investors are also likely to look at whether the company is in...more

Grid Electrification: Addressing Cybersecurity Threats and Mitigating Risk in the Renewable Energy Era - ABA Forum

Bradley Arant Boult Cummings LLP on 1/16/2019

Technology and the critical infrastructure that support our personal pursuits and business operations are ripe targets for cyberattacks. In particular, the electrical grid that transmits electricity from its point of...more

Vendor Risk & Data Security: Why Is This So Hard?

NAVEX on 1/3/2019

Studies about vendor risk related to data security always fascinate me, because conceptually those risks are so similar to the vendor risk challenges corporate compliance officers face with anti-corruption — and yet, the...more

Strategies for Protecting Against Vendor Payment Fraud

Foley & Lardner LLP on 10/16/2018

Cybercrime is an ever-increasing threat from which manufacturers are not immune. Although reliable statistics are not available, one particular type of scheme that seems to be on the rise is vendor payment fraud. In cases of...more

Vulnerable Vendors: Automakers’ Data Breach Highlights Importance of Vendor Cybersecurity

Fisher Phillips on 9/10/2018

This summer, several automakers, including Tesla, Toyota, General Motors, Ford, and Volkswagen learned that their closely held trade secrets were readily available on the internet. The source? An unprotected back-up server....more

Third Party Vendor Management Programs

BCLP on 7/24/2018

Third-party service providers present difficult and unique privacy and cybersecurity challenges. Vendor management is important throughout the life of a relationship with your service provider. ...more

California’s New Landmark Data Privacy Regulation and What Companies Need to Do to Comply

Fenwick & West LLP on 7/17/2018

What You Need to Know Now - • The new law takes effect January 1, 2020, but there’s a lot to do so you need to start work now. • The new law expands the definition of personal information and gives California consumers...more

Today's Popular Updates › Data Security › Vendors

"My best business intelligence, in one easy email…"