Category Archives: Cybersecurity Law

OCR Issues Cyberattack Response Checklist and Infographic

The United States Department of Health and Human Services’ Office for Civil Rights has just issued a checklist and infographic to aid healthcare organizations and their vendors in quickly responding to cyberattacks in compliance with HIPAA requirements.

#CyberAvengers – Ransomware is Spreading Like Worms: Are You Ready?

As some of you may have noticed online, I have the privilege of being part of the #CyberAvengers — here’s a little more info about the #CyberAvengers and an article we recently published in NextGov.com. Here is the NextGov article: Ransomware is Spreading Like Worms: Are You Ready? The #CyberAvengers are a group of salty …

Continue reading “#CyberAvengers – Ransomware is Spreading Like Worms: Are You Ready?”

Webinar: Global reaching Cybersecurity Regulations in New York, will they impact your company?

Now that the WannaCry ransomware has your attention and the attention of everybody else, it is time to start thinking about your company’s cybersecurity legal and compliance obligations. Do you know whether your company will be impacted by New York’s expansive and global reaching Cybersecurity Regulations? The new Regulations govern many companies that do business …

Continue reading “Webinar: Global reaching Cybersecurity Regulations in New York, will they impact your company?”

Does Board Oversight of Cybersecurity Mean Directors Must Become Cybersecurity Experts?

Does the board of directors’ duty of oversight over their companies’ cybersecurity require the individual directors to become experts on cybersecurity? That is a fair question and one that I’ve seen many people have difficulty understanding. The answer is “no,” as explained by Michael Santarcangelo (@catalyst) in his CSO article Why the board needs security leaders …

Continue reading “Does Board Oversight of Cybersecurity Mean Directors Must Become Cybersecurity Experts?”

3 More Key Cybersecurity Takeaways General Counsel Should Learn Learn from Yahoo

A good friend recently shared with me the article Verizon GC on the Lessons Learned from Deal with Yahoo (use Linkedin for paywall access) because he thought it would be valuable information to add to my own cybersecurity knowledge toolbox. Given the experience Verizon’s GC has gained through this process, when he talks about lessons […]

#DtSR Podcast: Guest Host on Newscast

I was a guest recently on the Down the Security Rabbithole Podcast to talk about cybersecurity law with hosts Rafal Los (@Wh1t3Rabbit) and Michael Santarcangelo (@Catalyst). As always, it was a blast! Listen to the Podcast   Join the #DtSR Discussion on Twitter For more great #DtSR content, check out the full Down the Security Rabbithole Podcast homepage and also check […]

National data breach notification law pros and cons? What do you think?

What are the pros and cons of a national breach notification law? What are the questions that need to be asked to facilitate this discussion? What are the critical points that need to be made?

#DtSR Podcast: Latest Issues in Law and Cybersecurity

I was a guest recently on the Down the Security Rabbithole Podcast to talk about cybersecurity law with hosts Rafal Los (@Wh1t3Rabbit) and Michael Santarcangelo (@Catalyst). As always, it was a blast! Listen to the Podcast   Join the #DtSR Discussion on Twitter For more great #DtSR content, check out the full Down the Security Rabbithole Podcast homepage and also check …

Continue reading “#DtSR Podcast: Latest Issues in Law and Cybersecurity”

Implications of DOJ Indictment of Russian & Canadian Hackers for Yahoo Breach?

https://youtu.be/B46ob96CD08

“Is the CIA spying on me?” “What do I do?” (radio interviews)

WikiLeaks’ Vault 7 revelation of the CIA’s hacking tools has created quite a stir. Paranoia ensued and many people are now worried about whether the CIA is spying on them through their televisions and coffee makers. In fact, one video has gone viral in which a woman asks her Amazon Alexa, “Alexa, are you connected to …

Continue reading ““Is the CIA spying on me?” “What do I do?” (radio interviews)”