Security News

Security expert weighs in on cybersecurity regulation and ransomware attacks of US cities
2020-05-26 20:03

CBS News and CNET Senior Producer Dan Patterson talked with Bryson Bort, founder and CEO of SCYTHE, a cybersecurity company that provides attack simulation, about privacy regulations, cities being attacked by ransomware, and whether cyber-deterrence works well. Dan Patterson: Presumably, somebody will win this election, and presumably we will have many people who are going to make determinations about regulation over the next, say, 18 to 36 months.

Security expert weighs in on cybersecurity regulation and ransomware attacks of US cities
2020-05-26 20:00

Bryson Bort, founder and CEO of cybersecurity company SCYTHE, fears "death by a thousand paper cuts" more than than a digital apocalypse. He also shares his views on how well cyber-deterrence works.

Australia's contact-tracing app regulation avoids 'woolly' principles in comparable cyber-laws, say lawyers
2020-04-27 00:01

Australia has released its promised COVID-19 contact-tracing app. Dubbed COVIDSafe, the smartphone app follows the now-established practice of asking people to register their name, age range, phone number, and postcode, and create a unique identifier.

Australia’s contact-tracing regulation avoids ‘woolly principals’ in comparable cyber-laws say lawyers
2020-04-27 00:01

Australia has released its promised COVID-19 contact-tracing app. Dubbed COVIDSafe, the smartphone app follows the now-established practice of asking people to register their name, age range, phone number, and postcode, and create a unique identifier.

GDPR, CCPA and beyond: How synthetic data can reduce the scope of stringent regulations
2020-04-14 05:00

Synthetic data is helping highly regulated companies safely use customer data to increase efficiencies or reduce operational costs, without falling under scope of stringent regulations. The GDPR does not expressly reference synthetic data, but it expressly says that it does not apply to anonymous information: according to UCL, "Information which does not relate to an identified or identifiable natural person or to personal data rendered anonymous in such a manner that the data subject is not or no longer identifiable." Synthetic data is considered personal data which has been rendered anonymous and therefore falls outside the material scope of the GDPR. Essentially, these important global regulatory mandates do not apply to collection, storage and use of synthesized data.

MediaPRO and BSI offer personalized privacy awareness and regulation specific training programs
2020-03-23 00:30

MediaPRO, a leading provider of security and privacy training solutions, has announced a new partnership with BSI, the international business improvement company. The new alliance will enable BSI to offer its clients personalized privacy awareness and regulation specific training programs that can be tailored to their risk management priorities.

Taming Regulations: Frameworks Needed More Than Ever
2020-03-04 21:04

As organizations face having to demonstrate compliance with a broad range of regulations that have an IT and cybersecurity impact, the imperative is to adopt frameworks such as ISO 27001 and NIST 800-53, says David Ogbolumani, chief cybersecurity and privacy officer at IT Security Consultants. Tackling today's top compliance and regulatory issues;.

Modified Draft CCPA Regulations: How They Impact Businesses
2020-02-26 15:49

California Attorney General Xavier Becerra recently issued modified draft regulations to carry out the California Consumer Privacy Act that are designed to help businesses take a more pragmatic approach to privacy. The proposed regulations clarify, for example, that businesses are not obligated to search for personal information in response to a consumer's request if certain conditions are met, says Caitlin Fennessy, research director at the International Association of Privacy Professionals.

Summit 7 prepares Defense and Aerospace Contractors for compliance with the new CMMC regulations
2020-02-20 00:45

Summit 7 Systems, a leading national provider of Cybersecurity Compliance Solutions for the Defense Industrial Base, announced an expansion of their Cybersecurity Practice Area with the addition of new software and services to prepare Defense and Aerospace Contractors for compliance with the new Cybersecurity Maturity Model Certification regulations. The CMMC regulations were created by the U.S. Department of Defense to strengthen Cybersecurity in the supply chain of the Defense Industrial Base, and version 1.0 was released on January 31, 2020.

Cybersecurity regulation is not one-size-fits-all
2019-12-04 05:00

Differences in cultural values have led some countries to tackle the spectre of cyberattacks with increased internet regulation, whilst others have taken a ‘hands-off’ approach to online security...