Governance, Risk and Compliance

Automated security compliance provider Laika has landed $50 million in Series C funding, which will be allocated toward bolstering its platform's functionality, according to TechCrunch.

The healthcare breach settlement between Lurie Children’s Hospital of Chicago and patients affected by an insider wrongdoing incident requires the hospital to make security program improvements.

According to the terms of the settlements, Experian, one of the big-three credit reporting agencies, will bear a $13.67 million fine for security incidents in 2012 and 2015 while T-Mobile will pay $2.43 million for its part in the 2015 Experian breach. Both companies have agreed to take steps to improve their security measures.  

The sharp increase in cost underscores the damage of ransomware on the private sector. The Financial Crimes Enforcement Network (FinCEN) noted that its analysis indicates that “ransomware continues to pose a significant threat to US critical infrastructure sectors, businesses, and the public.”  

The closely watched lawsuit has fueled an ongoing discussion over who should pay when businesses are hit by state-sponsored cyberattacks, and could have broader implications for policymakers, highlighting the urgent need for them to devise practical, long-term solutions to address increasing cyber threats blamed on nation-state actors.  

The ‘safe harbor’ provision of the HITECH Act mandates the HHS OCR to consider recognized best practices after a healthcare data breach. Its new video outlines the required evidence.

Cyber risk quantification should be at the center of an enterprise's actions to understand and measure risk posed in the event of a cyberattack. That data should then be used to estimate - financially - cyber risk exposure. To start this process, enterprises need 3 pillars to build a good cyber risk quantification program: the right data, appropria...

Inflation and recession loom large, but despite all the economic and budgetary pressures, companies need to think twice before combining the CISO and DPO roles.