Security News

Is ONC's 'Trusted Exchange Framework' Doable?
2018-01-10 22:03

CISOs, CIOs, Weigh the Pros and Cons of ONC's Security ProposalsWhile a draft "trusted exchange framework" unveiled last week by federal regulators includes proposed components that could raise...

Analysis: Security Elements of 'Trusted Exchange Framework'
2018-01-05 21:48

Some Proposals More Specific Than What's Required Under HIPAAFederal regulators have released a draft of a trusted health information exchange framework with some detailed security components that...

Significant Changes Coming to  NIST Cybersecurity Framework
2017-12-15 17:18

The latest ISMG Security Report focuses on the significant changes found in the latest version of the U.S. government's Framework for Improving Critical Infrastructure Cybersecurity, commonly...

NIST Publishes Second Draft of Cybersecurity Framework
2017-12-08 15:46

The National Institute of Standards and Technology (NIST) announced this week that it has published a second draft of a proposed update to the “Framework for Improving Critical Infrastructure...

Comparing Threat-centric vs. User-centric Security Frameworks
2017-11-14 14:33

Threat-centric security frameworks need to be supplemented with an approach based on user behavior, which is becoming a critical parameter in understanding organizations' risk postures,...

PCI Council Developing Software Framework
2017-11-14 14:33

The PCI Security Standards Council is creating a payments software framework, including two new standards that can evolve as the software rapidly changes, Troy Leach, the council's CTO, explains...

Bill Proposes Medical Device Cyber Framework, Guidelines
2017-10-11 20:33

Some Experts Question Whether a Voluntary Approach Is Strong EnoughA new House bill proposes that federal regulators work with healthcare providers and insurers as well as technology firms to...

A Framework for Cyber Security Insurance (Schneier on Security)
2017-08-30 18:22

New paper: "Policy measures and cyber insurance: a framework," by Daniel Woods and Andrew Simpson, Journal of Cyber Policy, 2017. Abstract: The role of the insurance industry in driving...

Microsoft Launches Ethereum-Based 'Coco Framework' to Speed Up Blockchain Network (The Hackers News)
2017-08-14 01:31

A growing number of enterprises are showing their interest in blockchains, but the underlying software fails to meet key enterprise requirements like performance, confidentiality, governance, and...

NIST Publishes Cybersecurity Workforce Framework (Security Week)
2017-08-09 13:26

NIST Proposes Ways for Organizations to Improve How to Identify, Recruit, Revelop, and Retain Cybersecurity Talent read more