Governance, Risk and Compliance

The sharp increase in cost underscores the damage of ransomware on the private sector. The Financial Crimes Enforcement Network (FinCEN) noted that its analysis indicates that “ransomware continues to pose a significant threat to US critical infrastructure sectors, businesses, and the public.”  

The closely watched lawsuit has fueled an ongoing discussion over who should pay when businesses are hit by state-sponsored cyberattacks, and could have broader implications for policymakers, highlighting the urgent need for them to devise practical, long-term solutions to address increasing cyber threats blamed on nation-state actors.  

The ‘safe harbor’ provision of the HITECH Act mandates the HHS OCR to consider recognized best practices after a healthcare data breach. Its new video outlines the required evidence.

Cyber risk quantification should be at the center of an enterprise's actions to understand and measure risk posed in the event of a cyberattack. That data should then be used to estimate - financially - cyber risk exposure. To start this process, enterprises need 3 pillars to build a good cyber risk quantification program: the right data, appropria...

Inflation and recession loom large, but despite all the economic and budgetary pressures, companies need to think twice before combining the CISO and DPO roles.

This week we're joined by Fleming Shi from Barracuda Networks - and Doctor Doug pontificates on: Fodcha , Cranefly, linkedin, CISA, really high speeds, Elon, and more on the Security Weekly News. This segment is sponsored by Barracuda Networks. Visit https://securityweekly.com/barracuda to learn more about them!

The latest Office of Civil Rights cybersecurity newsletter reminds providers of their security incident response requirements under the HIPAA Security Rule, which can also support a more timely response.