Cybersecurity & Data Breach: You Don’t Drown From Falling Into the Water

“You don’t drown from falling into the water, you drown from not getting out.” Think about that — and think about how that applies to cyber security and data breach issues facing companies in today’s cyber world. Here, in my first ever video blog post, I explain this issue with more detail.

Presentation tomorrow – Collin County Bar Ass’n Corporate Counsel Section – here’s the question:

“What do I talk about?” No, it’s not that I don’t have anything to say — for goodness sakes, you all know that I always have something to say! The problem I am having is that I had planned to talk about cyber risk compliance and the key elements of what a good cyber risk …

Cybersecurity Presentation at ACFE 25th Annual DFW Fraud Conference

I am really looking forward to speaking to the 400+ attendees at the Association of Certified Fraud Examiners’ (ACFE) 25th Annual DFW Fraud Conference event on Friday, May 15, 2015. My address is titled Addressing the Most Current Cybersecurity Threats: Don’t Be the Next Victim. You can learn more about this event at this LINK …

Executives & Board: The conversation security leaders need to have about Amy Pascal’s departure

This is an excellent article that covers a very important topic you need to consider. You — as in Executives and Board Members of Companies all around the world. Stop, close your eyes, and ask yourself these three questions that are in this article: “What did you think of the announcement?” (i.e., put yourself in …

Happy Data Privacy Day!

What are you doing to observe it? Today is Data Privacy Day! If you have been wondering “what is Data Privacy Day?” then this is your lucky day because not only is today Data Privacy Day, but here is the answer and an explanation for why it really matters to you and your company’s future …

Update/Clarification: Washington AG Seeks Data Breach Law That Ends Blanket Exemption for Encrypted Data

This update/clarification post explains how the proposed Washington state data breach notification law is really treating encrypted data and how it may actually be expanding the data breach safe harbor exceptions under that law.

Platform Magazine Quotes Tuma Discussing CyberGard: The Public Relations Side of a Data Breach

Thank you to Platform Magazine for quoting me discussing the PR component of my CyberGard – Business Cyber Risk Protection Program in this forward thinking article about the value of getting public relations on board before your company has a data breach. In a recent post I explained why a data breach response must focus on the …

Publix hasn’t had a data breach but is already seeking PR help in case it does — good or bad?

This is interesting. Publix grocery store chain has made the news because of data breach — not because they have had a data breach (though they probably have and just don’t know it) — but because it has been learned that it is sending out proposals for PR help in the event it does have …

Gov’t Contractors Must Notify of Data Breach Within 3 days

If your business is a contractor for the federal government, you had better have your data breach response ducks in a row. The moment you detect a breach, the clock starts ticking and you have only 3 days to notify of the breach. Yes, I said 3 days! You better already know who your legal counsel …

Two Step Data Breach Risk Test for Texas Businesses

Does your business have this digital information about other people? 1. last name + first name or first initial + social security number, driver’s license number, or other government issued identification, or account or card numbers + access codes, or 2. information that identifies an individual + concerns a health condition or healthcare  If you answered …