Thanks for posting this Ted Dziekanowski, the list of U.S cyber regulations keeps growing. HIPPA, PCI-DSS, State regulations for data protection, industry focused regulations such as NY DFS, regulations being developed for sectors such as energy or broader regulations such…
From the 1st of May Federal Deposit Insurance Corporation (FDIC) supervised banks must report cyber incidents, to comply with new cyber incident report regulations (). Following their November 2021 Final Ruling. This in effect covers most banks in the US.…
I have enclosed a document which is well worth a read, specifically Part 252.204.7012 (Safeguarding Covered Defence Information and Cyber Incident Reporting), page 10, as it forms a foundation for CMMC. There are couple of observations, which I would like…
The court recently agreed that CapitalOne had to release the post incident report completed by Maniant FireEye, following their 2019 data breach. Questioning the role of the client privilege relationship. Raising questions over the role of cyber and incident response…
EasyJet reports a data breach, albeit according to some it was aware of the incident back in January 2020. It’s worth noting that some reports have stated that BA has been fined by the ICO for its reported data breach…
The European Central Bank (ECB) put in place a pilot programme in 2016 for cyber breach reporting , as part of its IT risk programme () for incident reporting. The rational was quite simple, tell the ECB about your incidents…
Georgia is currently suffering a major cyber incident, which has impacted over 2000 websites, government infrastructure, NGOs, private businesses and TV stations Medi and Maestro, as well as a number of newspapers. Attacks on this scale bare the marks of…
The worlds largest hearing aid manufacturer Demant suffered a Ransomware incident in early September 2019. It has currently kept most of the information to itself for the time being so little is known. But if the reports are true it…
