Security News

Federal regulator's recently issued draft for a "trusted exchange framework" aimed at propelling nationwide, secure, interoperable, query-based health data exchange is a complex proposal that...

CISOs, CIOs, Weigh the Pros and Cons of ONC's Security ProposalsWhile a draft "trusted exchange framework" unveiled last week by federal regulators includes proposed components that could raise...

Some Proposals More Specific Than What's Required Under HIPAAFederal regulators have released a draft of a trusted health information exchange framework with some detailed security components that...

The latest ISMG Security Report focuses on the significant changes found in the latest version of the U.S. government's Framework for Improving Critical Infrastructure Cybersecurity, commonly...

The National Institute of Standards and Technology (NIST) announced this week that it has published a second draft of a proposed update to the “Framework for Improving Critical Infrastructure...

Threat-centric security frameworks need to be supplemented with an approach based on user behavior, which is becoming a critical parameter in understanding organizations' risk postures,...

The PCI Security Standards Council is creating a payments software framework, including two new standards that can evolve as the software rapidly changes, Troy Leach, the council's CTO, explains...

Some Experts Question Whether a Voluntary Approach Is Strong EnoughA new House bill proposes that federal regulators work with healthcare providers and insurers as well as technology firms to...

New paper: "Policy measures and cyber insurance: a framework," by Daniel Woods and Andrew Simpson, Journal of Cyber Policy, 2017. Abstract: The role of the insurance industry in driving...

A growing number of enterprises are showing their interest in blockchains, but the underlying software fails to meet key enterprise requirements like performance, confidentiality, governance, and...