Regulatory and Compliance

Here are some laws that come up frequently in technology conversation and are also most often among questions on security exams.

Details: Written by Robin Basham; Parent Category: Resources; Category: Regulatory and Compliance; Published: 06 June 2017; Created: 06 June 2017; Last Updated: 06 June 2017; Hits: 3389

Effective April 15^th 2017, AICPA's New Cybersecurity Risk Management Examination Report

Details: Written by Robin Basham; Parent Category: Resources; Category: Regulatory and Compliance; Published: 14 May 2017; Created: 14 May 2017; Last Updated: 14 May 2017; Hits: 2576

New York State Department of Financial Services (DFS) first-in-the-nation cybersecurity regulation to protect New York State from the ever-growing threat of cyber-attacks is now in effect. DFS Cybersecurity requires banks, insurance companies, and other financial services institutions regulated by DFS to establish and maintain a cybersecurity program designed to protect consumers and ensure the safety and soundness of New York State’s financial services industry.

Details: Written by Robin Basham; Parent Category: Resources; Category: Regulatory and Compliance; Published: 12 April 2017; Created: 12 April 2017; Last Updated: 12 April 2017; Hits: 1996

Read more: UK Cyber Essential in Brief

Details: Written by Robin Basham; Parent Category: Resources; Category: Regulatory and Compliance; Published: 09 March 2017; Created: 09 March 2017; Last Updated: 18 March 2017; Hits: 3232

We just got our daily update from JDSupra (still LOVE THEM!) titled "California's Shine the Light Law: Latest Class Action Threat for Online Retailers and Electronic Commerce Companies", under the topic of Retail Industry Alert. Here's a link to get you started, because it's important business compliance reading, but that's not why I'm sending you all this letter.

Details: Written by Robin Basham; Parent Category: Resources; Category: Regulatory and Compliance; Published: 09 February 2012; Created: 30 November 2015; Last Updated: 05 March 2017; Hits: 3005

While 15% of EU citizens report not trusting businesses with their information, they also lack the tools to securely manage their own private information.

Details: Written by Robin Basham; Parent Category: Regulatory and Compliance; Category: GDPR European Union Data Protection Directive; Published: 21 June 2017; Created: 02 February 2017; Last Updated: 11 July 2017; Hits: 3214

Me Tarzan, You Jane is my way of reminding everyone that we can't get far without some common language. This month, GDPR and NIST 171 are top of mind around our office. Here's what we found helpful.

Details: Written by Robin Basham; Parent Category: Regulatory and Compliance; Category: GDPR European Union Data Protection Directive; Published: 21 May 2017; Created: 21 May 2017; Last Updated: 21 May 2017; Hits: 3515

Risks in Life Logging - ENISA, because Europe saw it coming

Details: Written by Robin Basham; Parent Category: Regulatory and Compliance; Category: GDPR European Union Data Protection Directive; Published: 18 May 2017; Created: 18 May 2017; Last Updated: 18 May 2017; Hits: 2300

In order to propose controls that would implement the requirements of the GDPR in UK governed business, EnterpriseGRC Solutions has embarked on mapping the The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), a regulation by which the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU), to the both NIST 800 53 r4 control enhancements and the HM Government (Her Majesty's) NATIONAL CYBER SECURITY STRATEGY 2016-2021. Please download the National Cyber Security document here National Cyber Security Strategy 2016-2021 - Gov.uk

Details: Written by Robin Basham; Parent Category: Regulatory and Compliance; Category: GDPR European Union Data Protection Directive; Published: 16 May 2017; Created: 16 May 2017; Last Updated: 09 June 2017; Hits: 3573

Keith Lipman, Esq. is an outstanding writer and contributor at JDSupra

EU Data Protection Authorities Approve Google’s Cloud Commitments for International Data Transfers

ISO/IEC 27001:2005 - now ISO/IEC 27002:2013

Details: Written by Robin Basham; Parent Category: Regulatory and Compliance; Category: ISO 27002:2013 ISMS; Published: 30 November 2015; Created: 30 November 2015; Last Updated: 05 March 2017; Hits: 1973