SecureWorld News

MAY 14, 2024

Aaron Weismann , CISO at Main Line Health, questions how valuable AI-powered virtual assistants really are. With AI, the Silicon Valley approach to 'move fast and break things' can have very real, and negative, consequences on cybersecurity and patient safety," said Esmond Kane , CISO at Steward Health Care.

Healthcare 98

Healthcare Artificial Intelligence CISO Government 98

SecureWorld News

NOVEMBER 28, 2022

Designate a qualified individual (CISO or equivalent) responsible or overseeing and implementing a cybersecurity program and enforcing its cybersecurity policy. Require the CISO to provide a written report at least annually to the board or equivalent governing body. It's a core responsibility of the board and management team.".

Financial Services 75

Financial Services Cybersecurity CISO InfoSec 75

SecureWorld News

NOVEMBER 14, 2023

Enhanced cybersecurity governance requirements, mandating that boards of directors and senior management oversee and actively participate in cybersecurity risk management. These entities will face heightened cybersecurity obligations, including the mandatory implementation of independent audits of their cybersecurity programs.

Financial Services 96

Financial Services Cybersecurity CISO Risk 96

SecureWorld News

JANUARY 24, 2023

Adding to the growing importance of the CISO role, required disclosures will also include how often and by which processes board members are informed of and discuss cyber risk. The new rules indeed show the increasing importance of the CISO's role, particularly as it pertains to communication with the board.

Cybersecurity 89

Cybersecurity Cyber Risk CISO Risk 89

CyberSecurity Insiders

JANUARY 6, 2023

In addition, teams may be using operational frameworks that don’t enforce standardization and governance, as their API holdings skyrocket. The need to protect business operations, customers, and data will be a key driver for organizations to implement API security platforms.

CISO 118

CISO Financial Services Risk Unstructured Data 118

Security Boulevard

APRIL 12, 2024

Government says victims include the “critical infrastructure sector.” A hard-coded credential catastrophe: The analytics firm kept big companies’ secrets in an insecure AWS bucket. The post Sisense Hacked: CISA Warns Customers at Risk appeared first on Security Boulevard.

Risk 139

Risk Hacking Government Digital transformation 139

eSecurity Planet

OCTOBER 7, 2022

government statement said Sullivan continued to lie to Khosrowshahi and to the company’s lawyers about the specifics of the hack. See the Top Governance, Risk & Compliance (GRC) tools. When Dara Khosrowshahi took over as Uber’s new CEO in August 2017, the U.S. His sentencing date hasn’t yet been set. What CSOs Should Do.

Data breaches 116

Data breaches Data privacy Cybersecurity CISO 116

CyberSecurity Insiders

JUNE 7, 2023

By Dannie Combs , Senior Vice President and CISO, Donnelley Financial Solutions (DFIN) As security threats to data continue to ebb and flow (mostly flow!), As with any game-changing technology, we can expect AI models to be regulated with safety and security standards, possibly at the government level. How should we manage AI?

Risk 118

Risk Artificial Intelligence Technology Digital transformation 118

The Security Ledger

APRIL 27, 2021

In this episode of the podcast (#212), Brandon Hoffman, the CISO of Intel 471 joins us to discuss that company’s latest report that looks at China’s diversified marketplace for stolen data and stolen identities. The post Episode 212: China’s Stolen Data Economy (And Why We Should Care) appeared first on The Security Ledger with Paul F.

CISO 52

CISO Data breaches Cyber Attacks Big data 52

Cisco Security

JUNE 30, 2022

After two years of virtual engagements, in-person events like our CISO Forum and Cisco Live as well as the industry’s RSA Conference underscore the power of face-to-face interactions. Data privacy is getting personal . It’s a reminder of just how enriching conversations are and how incredibly interconnected the world is.

Digital transformation 124

Digital transformation Data privacy Identity Theft Data breaches 124

eSecurity Planet

JANUARY 5, 2023

“In 2022, governments fought wars online, businesses were affected by multiple ransomware gangs, and regular users’ data was constantly on hackers’ radars,” said NordVPN CTO Marijus Briedis. 2023, he predicted, “will not be any easier when it comes to keeping users’ data safe and private.”

Ransomware 145

Ransomware CISO Software Cybercrime 145

SecureWorld News

JUNE 16, 2023

Government entities should take a risk-based approach to AI," said Michael Gregg, CISO for the State of North Dakota. Gregg will serves as a keynote speaker at SecureWorld Denver on September 19 and SecureWorld Dallas on October 26 on the topic of " Lessons from a CISO: Increasing Your Cybersecurity Footprint Despite Worn Soles."

Artificial Intelligence 90

Artificial Intelligence Technology CISO Government 90

eSecurity Planet

JANUARY 6, 2022

Ransomware has already been combined with distributed denial-of-service (DDoS) attacks , and Manky notes that ransomware could see the addition of wiper malware, “which could not only wreck data but destroy systems and hardware. … This could be a concern for emerging edge environments, critical infrastructure, and supply chains.”

Ransomware 136

Ransomware Cybersecurity Artificial Intelligence CISO 136

Thales Cloud Protection & Licensing

SEPTEMBER 27, 2023

It is the place to be for CISOs, business leaders, product managers, security strategists, and identity architects to get the education, tools, and best practices to roll out modern authentication across web, enterprise, and government applications.

Authentication 83

Authentication Data privacy Education Technology 83

CyberSecurity Insiders

MAY 1, 2023

The findings echo a report by Aimpoint Group, W2 Research, and CISO Connect, which revealed that 42% of 400 chief information security officers (CISOs) identified API security as their primary concern. As a result, securing APIs has emerged as a critical aspect of ensuring data privacy and system stability.

Threat Detection 105

Threat Detection Artificial Intelligence CISO Cyber threats 105

SecureWorld News

MARCH 28, 2023

Those who had the opportunity to attend this year's conference heard some amazing keynote sessions, starting with the opener on Day 1 of the event by Andrew Smeation, CISO for Afiniti. Our second keynote of Day 1 was given by the eccentric Chris Roberts, CISO of Boom Supersonic. technological competitiveness.

Technology 72

Technology Cyber Risk CISO Cybersecurity 72

SecureWorld News

AUGUST 7, 2023

This first installment is "Safeguarding Ethical Development in ChatGPT and Other LLMs through a Comprehensive Approach: Integrating Security, Psychological Considerations, and Governance." Three key elements require our attention: security measures, psychological considerations, and governance strategies.

Technology 93

Technology Risk Government Engineering 93

SecureWorld News

AUGUST 14, 2023

This second installment is "Safeguarding Ethical Development in ChatGPT and Other AI Tools through a Holistic Approach: Integrating Security, Governance, and Psychological Considerations." Three key elements require our attention: security measures, psychological considerations, and governance strategies. Watch for it on August 21.

Technology 74

Technology Education Government Data privacy 74

CyberSecurity Insiders

JANUARY 9, 2023

SecOps, Governance Risk and Compliance (GRC) and ITOps teams use wide variety of tools and operational data to mitigate security posture exposures and fortify business resiliency, yet audit readiness and compliance validation remain a challenge. 1 ESG Research: 2021: State of Data Privacy and Compliance. CMO at Oomnitza.

Policy Compliance 142

Policy Compliance Technology Digital transformation Encryption 142

SecureWorld News

MAY 24, 2023

Not even government agencies are safe. The IRS eFile website has reportedly come under attack , leading to serious data leaks and an invasion of consumer data privacy. Holes in the existing disclosure policy There are several compliance regulations that companies must abide by to protect data privacy.

Cybersecurity 88

Cybersecurity Data privacy Risk Media 88

NopSec

APRIL 19, 2017

If you’ve been following along with NopSec’s implementation recommendations, you may already know that we suggest prioritizing two things: your baseline risk assessment and the appointment of a CISO (chief information security officer). Contracting with a virtual CISO is also an option.

CISO 40

CISO Cybersecurity Risk Financial Services 40

SecureWorld News

MARCH 10, 2022

In this installment, meet two of the leaders behind the WiCyS Delaware Valley affiliate, which is composed of women trailblazers from academia, government, and industry cybersecurity sectors. Rosemary Christian is Co-President of WiCyS Critical Infrastructure and a board member for WiCyS Delaware Valley.

Cybersecurity 84

Cybersecurity Data privacy Education Banking 84

Thales Cloud Protection & Licensing

APRIL 1, 2021

Today’s remote working environment relies heavily on the collaborative sharing of information, challenging organizations to maintain the security of confidential data and regulatory compliance while driving employee productivity.

Encryption 79

Encryption Financial Services Data privacy Insurance 79

SecureWorld News

AUGUST 21, 2023

This third installment is "Safeguarding Ethical Development in Chat GPT and Other LLMs through a Comprehensive Approach: Integrating Security, Psychological Considerations, and Governance." Now, for Part 3: Governance circling in AI's LLM waters. This analogy captures the dynamics between governance and generative AI.

Government 74

Government Cybersecurity Data privacy Artificial Intelligence 74

SC Magazine

FEBRUARY 8, 2021

In one notable example, insurers refused to pay Mondelez International’s claim after the NotPetya attack was labeled an act of the Russian government, claiming the attack fell under the policy’s “hostile or warlike action in time of peace or war” exemption. And in a few high-profile cases, insurance companies have bailed.

Insurance 126

Insurance Cyber Insurance Cybersecurity Government 126

Thales Cloud Protection & Licensing

AUGUST 15, 2019

375 the California Consumer Privacy Act (CCPA), making California the first U.S. state to pass its own data privacy law. Under the CCPA publicly available information is defined as “lawfully made available from federal, state, or local government records, if any conditions associated with such information.”.

Digital transformation 92

Digital transformation Data collection Data privacy CISO 92

CyberSecurity Insiders

AUGUST 7, 2021

Yet as companies integrate social media into their business strategies, they should also be updating and sharing new data privacy practices with their customers to build trust and ensure that they feel safe and secure. To learn more about PCI Pal, you can visit the website at [link] and stay tuned for the full survey. About PCI Pal.

Media 40

Media Data breaches Retail Data privacy 40

SecureWorld News

OCTOBER 20, 2021

The section on cyber risk is in bold: "We face legal, reputational and financial risks from any failure to protect client and/ or Accenture data from security incidents or cyberattacks.". These are the very impacts we regularly hear CISOs mention on SecureWorld webcasts. L egal, reputational and financial risks?

Cyber Risk 81

Cyber Risk Risk Insurance Cyber Insurance 81

SC Magazine

FEBRUARY 3, 2021

Today’s columnist, Steve Durbin of the Information Security Forum, offers advice to Chris DeRusha the new federal CISO. Durbin says the Biden administration has a great opportunity to work with the broader security community towards fostering security awareness and the need to protect data privacy.

CISO 93

CISO Government Security Awareness Artificial Intelligence 93

Security Boulevard

FEBRUARY 13, 2024

The post ‘Incompetent’ FCC Fiddles With Data Breach Rules appeared first on Security Boulevard. FCC FAIL: While Rome burns, Federal Communications Commission is once again behind the curve.

Data breaches 114

Data breaches Data privacy CISO Security Awareness 114

eSecurity Planet

SEPTEMBER 23, 2022

Also read: Security Compliance & Data Privacy Regulations. See the top Governance, Risk & Compliance (GRC) tools. New roles are coming — even at private companies, where the rules may have an effect too — and cybersecurity pros should prepare for them. SOX: A Template of Success. Proposed SEC Security Changes.

Cybersecurity 131

Cybersecurity Risk Passwords Encryption 131

The Last Watchdog

JANUARY 10, 2022

Working with personal data in today’s cyber threat landscape is inherently risky. Related: The dangers of normalizing encryption for government use. It’s possible to de-risk work scenarios involving personal data by carrying out a classic risk assessment of an organization’s internal and external infrastructure. Unique IDs.

Risk 240

Risk Encryption Data privacy CISO 240

Security Boulevard

SEPTEMBER 26, 2023

Hackers Play in Sony’s World: If true, Sony might have to push the RESET button (again). The post ‘All of Sony’ Hacked, Claims Ransomed.vc Group appeared first on Security Boulevard.

Hacking 80

Hacking Social Engineering CISO Data privacy 80

eSecurity Planet

JULY 27, 2023

Securities and Exchange Commission this week announced new rules mandating the disclosure of cybersecurity incidents as well as ongoing risk management, strategy, and governance. ” Still, Exabeam CISO Tyler Ferrar told eSecurity Planet by email that he’s hopeful the rules will benefit consumers too by encouraging better security.

Data privacy 98

Data privacy Risk Government Cyber threats 98

Security Boulevard

DECEMBER 21, 2023

2023 will be remembered as the year when breaches of trust, not cybersecurity, led to a fever pitch of litigation and regulatory changes. In 2023, the Federal Trade Commission (FTC) implemented a delayed formal change to the Safeguards Rule, expanding the scope of covered entities, and announced another change to be effective in early 2024.

Cybersecurity 69

Cybersecurity Data privacy CISO Risk 69

The Last Watchdog

MARCH 21, 2022

Evolving privacy regulations like the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) mean ongoing headaches for cybersecurity, compliance and risk management teams. At least 10 additional states have enacted or are considering data privacy laws. Best data management practices.

Encryption 214

Encryption Data privacy Cloud Migration Risk 214

Security Boulevard

MARCH 7, 2022

When it comes to successfully securing your organization today, the three most important words may be who, what, Read More. The post IAM Compliance: Set Your Organization Up for Success appeared first on Hyperproof. The post IAM Compliance: Set Your Organization Up for Success appeared first on Security Boulevard.

Data privacy 98

Data privacy CISO Risk Government 98