Policy & Regulation: Page 21
-
Courtesy of Colonial Pipeline Company
TSA directive will add teeth to pipeline security oversight
The Transportation Security Administration will require companies to appoint a cybersecurity coordinator, and report confirmed and potential security incidents to CISA.
By Samantha Schwartz • May 27, 2021 -
Matthew Horwood via Getty Images
How security and privacy can cultivate a relationship
Security and privacy are interwoven and layered throughout a company, motivated toward the end goal of data protection. Successful organizations recognize the overlap — and capitalize on it.
By Samantha Schwartz • May 20, 2021 -
Drew Angerer via Getty Images
White House to take proactive role in ransomware fight
The administration can no longer passively wait for the next cyber crisis to take hold before it decides to engage, said Anne Neuberger, a Biden administration cybersecurity official.
By David Jones • May 19, 2021 -
Drew Angerer via Getty Images
Colonial Pipeline disconnects OT systems to silo ransomware IT threat
Anxiety is rising among corporate security officials concerned about the impact of ransomware among critical infrastructure providers.
By David Jones • May 12, 2021 -
Jack Taylor / Stringer via Getty Images
Cryptocurrency fuels ransomware payments. Without regulation, it could get worse
The rapid ascent of crypto, like other emerging technologies before it, has far outpaced the federal government's ability to regulate it.
By Samantha Schwartz • May 7, 2021 -
Photo illustration by Danielle Ternes/Cybersecurity Dive; photograph by yucelyilmaz via Getty Images
100-day DOE grid security push targets ICS, OT
The Department of Energy has also issued a request for information seeking recommendations for securing U.S. energy system supply chains.
By Robert Walton • April 21, 2021 -
Stock Photo via Getty Images
Payments industry faces potential 'destructive attacks,' Biden cybersecurity official warns
Ransomware and infrastructure attacks are the biggest threats to the industry, a Biden administration cybersecurity official told the American Transaction Processors Coalition.
By Lynne Marek • April 9, 2021 -
'Advanced cyberconflict' is nearing, researchers say
Enterprises represent 35% of nation-state targets, whereas government or regulatory agencies are 12% of targets, according to the report.
By Samantha Schwartz • April 8, 2021 -
Orbon Alija/ E+/Getty via Getty Images
OpinionIoT cybersecurity law does not go far enough to protect industry
As networks become more connected and reliant on third-party sources like cloud and SaaS applications, most companies continue to have massive blind spots.
By Justin Fier • April 5, 2021 -
Stock Photo via Getty Images
Threat data sharing considered critical to defense amid rise in sophisticated attacks: report
A Ponemon Institute study shows the value of actionable data as lawmakers and the Biden administration work to encourage intelligence sharing.
By David Jones • March 24, 2021 -
Getty Images
White House looks to tighten private sector coordination, gain infrastructure insight
Following the Microsoft Exchange and SolarWinds attacks, the Biden administration is taking steps to close visibility gaps and encourage rapid intelligence sharing by private sector companies.
By David Jones • March 15, 2021 -
Google Cloud enters cyber insurance collaboration with Allianz, Munich Re
The agreement comes amid increased financial pressure on the cyber insurance industry due to a rise in ransomware and the historic nation-state attack against SolarWinds.
By David Jones • March 2, 2021 -
SolarWinds missed early security warnings
Lawmakers scrutinized SolarWinds' security practices, including its use of "solarwinds123" as a password, a lapse blamed on a former intern.
By David Jones • March 1, 2021 -
Senate SolarWinds hearing turns attention to breach notification laws, intel sharing
Amazon Web Services came under fire for declining to attend the hearing as top executives emphasized the need for faster disclosure and industrywide standards.
By David Jones • Feb. 24, 2021 -
Water system hack reveals thousands of organizations vulnerable to Window 7 exposure
Critical infrastructure providers and SMBs continue to operate the outdated Microsoft OS without security updates and patches.
By David Jones • Feb. 19, 2021 -
Jacob Bell / BioPharma Dive
FDA appoints first medical device cybersecurity chief
University of Michigan professor Kevin Fu will serve a one-year term as acting cyber director at the Center for Devices and Radiological Health. Experts fear the chaos of the pandemic created the perfect storm for hackers to exploit.
By Greg Slabodkin • Feb. 4, 2021 -
Getty
Attention to K-12 cybersecurity grows in nearly 100 bills introduced in 2020
With K-12 becoming a top target due to a combo of high-value data available and limited protection, a new report examines legislative trends.
By Roger Riddell • Feb. 1, 2021 -
Tanaonte via Getty Images
GDPR regulators are sinking their teeth into violators. 2020's fines are proof.
The European regulation took about a year before major fines were introduced. Watchdogs are in a grey area of harnessing better privacy standards and having zero tolerance for negligent or intentional violations.
By Samantha Schwartz • Jan. 28, 2021 -
Stock Photo via Getty Images
Privacy investments mitigate security losses, report finds
Spending on data privacy has become a priority amid new concerns about COVID-19 data and remote work environments, a study from Cisco shows.
By David Jones • Jan. 26, 2021 -
Getty
Cyber defense panel sees more private sector coordination following SolarWinds
Defense and intelligence experts say federal agencies need to strengthen private sector support, intelligence sharing to prevent the next big nation-state attack.
By David Jones • Jan. 20, 2021 -
Brian Tucker/Cybersecurity Dive
With cyber bureau, State Department brings diplomacy to threat landscape
CISOs and security experts see the federal bureau as a potential bridge to help align the government and private sector as nation-states pose increased threats.
By David Jones • Updated Jan. 11, 2021 -
Democrats control Congress. Will 2021 be the year for federal privacy laws?
Don't hold your breath.
By Samantha Schwartz • Jan. 8, 2021 -
Federal task force says Russia likely actor behind SolarWinds attack
As investigations continue, agencies are working to preserve private-sector trust.
By David Jones , Samantha Schwartz • Jan. 5, 2021 -
Feds require banks to report cyberattacks within 36 hours
The rule, taking effect May 1, requires bank technology vendors to immediately notify customers if an incident disrupted services four hours or more.
By Dan Ennis • Updated Nov. 19, 2021 -
valentinrussanov via Getty Images
Federal agencies warn of heightened cyberthreats against K-12 schools
Cyberattackers are trying to steal data and disrupt remote learning as COVID-19 continues to impact schools, the FBI, CISA and MS-ISAC said.
By David Jones • Dec. 11, 2020
Previous
