Governance, Risk and Compliance

In 2023, at least five new “rights-based” data privacy laws will become enforceable in the United States at the state level, including the California Privacy Rights Act (CPRA). Common to all of these laws are information security requirements, including the need for risk assessments and the need for authenticating data access requests. In this pod...

In March 2022, the SEC proposed new rules governing the reporting of cybersecurity incidents. This session will explore how businesses will be affected by this and similar legislation and provide tips to compliance and technical teams alike. Security Weekly listeners save 20% on this year’s InfoSec World Conference by visiting https://securityweek...

Two House committee chairs are accusing Department of Homeland Security Inspector General Joe Cuffari of stonewalling Congress and potentially violating the law by not turning over documents and communications around the deletion of Secret Service texts in the days following the Jan. 6 Capitol riot.

In response to continued targeting of the healthcare sector by ransomware actors, Congress has asked the Department of Health and Human Services on progress made in cybersecurity collaboration efforts.

The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) sanctioned Tornado Cash for money laundering, citing that the so-called "virtual currency mixer" has been utilized to launder more than $7 billion in virtual currency since its launch in 2019.

The Federal Trade Commission narrowly voted to explore new regulations on commercial data surveillance, saying the growing practice raises the risk of data breaches, manipulation of consumers and other harmful practices.

In the last year, the FDA has signaled that the responsibility of medical device security is moving to manufacturers, designing with security in mind; an effort that could address systemic issues.

A recent change in Chinese laws put new burdens on researchers that could have disincentivized participation vulnerability discovery competitions, such as Pwn2Own.