Data Matters

SEPTEMBER 20, 2021

The National Association of Insurance Commissioners (NAIC) held its Summer 2021 National Meeting (Summer Meeting) August 14-17, 2021. The changes are effective December 31, 2021. Valuation of Securities (E) Task Force Adopts an Amendment to the Purposes and Procedures Manual to Add Instructions for Review of Funds.

Insurance 87

Insurance e-Delivery Paper Sales 87

IT Governance

NOVEMBER 22, 2021

Amid the mad dash for bargains and inevitable stories of shop-floor brawls, Black Friday brings with it a spike in cyber security threats – and it’s easy to see why. Alternatively, you’ll download a Word document that asks you to ‘Enable Content’, which will unleash malware on your systems. Instant messaging scams. Can you spot a scam?

Phishing 116

Phishing Sales Passwords Retail 116

DLA Piper Privacy Matters

MAY 5, 2021

The Department for Culture Media and Sport recently published its annual Cyber Security Breaches Survey (the “Survey” ), which aims to capture trends in cyber security incidents and provides a snapshot of the approach of UK businesses to the risks of an incident and the types of incidents seen in the previous 12 months.

Security 105

Security Personal data GDPR Privacy 105

Data Matters

FEBRUARY 9, 2021

Released on February 1, the Financial Industry Regulatory Authority (FINRA) 2021 Report on its Examination and Risk Monitoring Program (Report) provides a roadmap for member firms to use to prepare for examinations and to review and assess compliance and supervisory procedures related to business practices, compliance, and operations.

Risk 82

Risk IT Compliance Marketing 82

eSecurity Planet

JULY 16, 2021

With 13% of human-related breaches containing ransomware and 10% of ransomware attacks costing organizations an average of $1 million, IT security teams need to be prepared for the worst. More than 250 professionals, including advanced security experts, reverse engineers, and malware analysts. Key Differentiators. Key Differentiators.

Analytics 114

Analytics Data science Cloud Ransomware 114

IT Governance

MAY 12, 2021

This month, we look at a scam imitating SharePoint that has bypassed Microsoft’s secure email gateway, and investigate the damaging effects of a data breach at a cryptocurrency platform. SharePoint users are being warned about targeted phishing attacks that claim users must urgently provide a signature on a document.

Phishing 69

Phishing Data breaches Access Passwords 69

IT Governance

OCTOBER 4, 2021

Sophos’s most recent annual ransomware survey, The State of Ransomware 2021 , found that 37% of organisations surveyed in 2021 had been affected by ransomware in the previous year. Keep your technical security measures up to date. Test for security vulnerabilities. Train your staff. Cyber Security as a Service.

Ransomware 123

Ransomware Insurance Phishing Access 123

Hunton Privacy

JULY 12, 2021

On June 30, 2021, the New York State Department of Financial Services (“NYDFS,” the “Department”) issued guidance to all New York state regulated entities on ransomware (the “Guidance”), identifying controls it expects regulated companies to implement whenever possible.

Ransomware 102

Ransomware Security Financial Services Cybersecurity 102

eSecurity Planet

MARCH 7, 2022

A SaaS security company says a spike in cyber attacks from Russia and China in recent weeks suggests the two countries may be coordinating their cyber efforts. Security Agencies Release Network Security, Vulnerability Guidance ). SaaS Apps Under Attack. ” Office 365 the Most Attacked App.

Security 134

Security Risk Military Cybersecurity 134

Armstrong Archives

MARCH 13, 2024

As of 2021, that figure has soared to 88%. While many healthcare documents are now digital, care providers still have millions of paper files that need to be digitized. Medical records scanning solutions from providers like Armstrong Archives can help organizations bridge the gap between their existing physical documents and EHR data.

Paper 52

Paper Archiving Records Management Compliance 52

Hunton Privacy

JANUARY 19, 2021

On January 18, 2021, the European Data Protection Board (“EDPB”) released draft Guidelines 01/2021 on Examples regarding Data Breach Notification (the “Guidelines”). Training should take place regularly and be tailored to the controller’s processing and business activities.

Data breaches 99

Data breaches Personal data GDPR Risk 99

Security Affairs

NOVEMBER 22, 2021

According to Iran’s Fars News Agency, Mahan Air was hit by similar attacks “many times,” for this reason Mahan’s Cyber Security Team rapidly neutralized these attacks. IranProtests #MahanAir pic.twitter.com/bBkfBKJ4uK — Hooshyarane Vatan (@Hooshyaran1) November 21, 2021. Follow me on Twitter: @securityaffairs and Facebook.

IT 127

IT Security Cybersecurity Government 127

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. It includes multi-disciplinary risk and compliance management solutions and tools, including: IT & security risk management. IT governance and security.

Compliance 67

Compliance Risk Government Retail 67

Data Matters

SEPTEMBER 28, 2021

This summer, the Federal Trade Commission (“FTC”) hosted its sixth annual PrivacyCon , an event focused on the latest research and trends related to consumer privacy and data security. AI and algorithms received substantial attention at PrivacyCon 2021. Algorithms. Privacy – Considerations and Understanding.

Privacy 87

Privacy Security IoT Data breaches 87

Security Affairs

FEBRUARY 12, 2022

and Australia have published a joint advisory warning of an increased globalised threat of ransomware worldwide in 2021. “Ransomware tactics and techniques continued to evolve in 2021, which demonstrates ransomware threat actors’ growing technological sophistication and an increased ransomware threat to organizations globally.”

Ransomware 98

Ransomware Agriculture Encryption Cybersecurity 98

Data Matters

SEPTEMBER 23, 2021

On August 20, 2021, China’s National People’s Congress passed the Personal Information Protection Law (PIPL), which will become effective starting November 1, 2021. Document readiness. Communication and training. in Chinese under PIPL.

Data Privacy 95

Data Privacy Compliance Privacy Personal data 95

Security Affairs

FEBRUARY 10, 2022

The crooks were able to falsify official documents of the victims and use them to trick telephone store employees into providing them a duplicate of SIM cards. With this, they deceived the employees of phone stores to obtain duplicate SIM cards and, in this way, have access to the bank’s security confirmation messages.

Passwords 116

Passwords Authentication Access Retail 116

eSecurity Planet

SEPTEMBER 7, 2021

Why do these vulnerabilities pose such a major security risk? Or they can package malware that can be directly installed on your machine or come through an email attachment disguised as something trustworthy , like a document or link from your boss. In July 2021, another wave of attacks hit SolarWinds.

Risk 135

Risk Cybersecurity Ransomware Security 135

Data Matters

JUNE 24, 2021

On June 15, 2021, the SEC announced settled charges against First American Title Insurance Company (First American) for disclosure controls and procedures violations related to a cybersecurity vulnerability that exposed sensitive customer information. This resolution highlights the SEC’s continued focus on cybersecurity.

Cybersecurity 67

Cybersecurity Financial Services Risk Compliance 67

IT Governance

NOVEMBER 23, 2023

You’d therefore expect that the sector fares better at data security than your average organisation. The public data set on the ICO (Information Commissioner’s Office) website shows that data security isn’t necessarily better for financial organisations. What do the statistics say?

Risk 83

Risk Data breaches Authentication Financial Services 83

Thales Cloud Protection & Licensing

DECEMBER 20, 2023

This development model enables enterprises to conduct model training and processing directly at the edge or on-premises. This strategy addresses security concerns related to intellectual property and sensitive data in large language models (LLMs). This necessitates a shift in cybersecurity strategies. Gartner has recognized this shift.

Cybersecurity 83

Cybersecurity Blockchain Artificial Intelligence Encryption 83

AIIM

JANUARY 7, 2021

With the new year in full swing, there's a lot of conversation around what comes next and what 2020's impact will mean for 2021. A recent study commissioned by Egnyte surveyed 400 IT leaders to understand how COVID-19 has impacted businesses’ ability to maintain data security and governance with a distributed workforce.

Government 171

Government Unstructured data Artificial Intelligence Risk 171

IT Governance

OCTOBER 31, 2023

Publicly disclosed data breaches and cyber attacks France says Russian state hackers breached numerous critical networks Date of breach: From second half of 2021 (reported 26 October 2023). Thousands of drivers have sensitive data exposed to hackers in major IT breach Date of breach: Unclear, but breached documents date back to 2017.

Data Privacy 52

Data Privacy Privacy Security Data breaches 52

IT Governance

JUNE 8, 2023

A Digital Guardian report found that 90% of corporate security breaches are the result of phishing attacks. The UK Government’s Cyber Security Breaches Survey 2022 revealed that 83% of organisations that suffered a cyber attack in the past year said that it was caused by phishing. This represents a 28% increase compared to 2021.

Phishing 107

Phishing Data breaches Communications Government 107

Data Matters

JANUARY 12, 2022

On December 17, 2021, the U.S. Securities and Exchange Commission (SEC) announced settled charges against a broker-dealer firm for recordkeeping violations arising from its employees’ use of personal devices for business communications. The SEC’s Concerns With Off-Channel Communications. FINRA’s Focus on Off-Channel Communications.

Communications 87

Communications Marketing Compliance Security 87

Hunton Privacy

APRIL 22, 2021

On April 21, 2021, the European Commission (the “Commission”) published its Proposal for a Regulation on a European approach for Artificial Intelligence (the “Artificial Intelligence Act”). The Proposal follows a public consultation on the Commission’s white paper on AI published in February 2020.

Artificial Intelligence 81

Artificial Intelligence Risk Education Paper 81

Data Matters

OCTOBER 13, 2021

Securities and Exchange Commission (SEC) Division of Enforcement is stepping up investigative efforts looking at registered firms’ use of personal devices for business communications, which can implicate their recordkeeping obligations and result in failure to retain and produce responsive business-related communications in SEC investigations.

Communications 155

Communications Marketing Privacy Compliance 155

Archive-It

FEBRUARY 18, 2021

Partner Penny Baker at the Pennsylvania Horticultural Society is documenting their important support roles across Philadelphia neighborhoods through a web archiving collaboration with the Philadelphia Area Consortium of Special Collections Libraries (PACSCL). Tech and Training. New live and recorded training.

Archiving 26

Archiving Digital preservation IT Libraries 26

ARMA International

APRIL 28, 2022

These undertakings require planning, communication, documentation, and collaboration to be successful. On the 29th of August, 2021, New Orleans felt the impacts of Hurricane Ida. On August 27, 2021, the OAR staff worked on hurricane preparations. The category four hurricane inundated the city with wind and rain.

Records Management 97

Records Management Archiving Insurance Communications 97

Security Affairs

DECEMBER 1, 2021

Which are the most secure encrypted messaging apps? An FBI document shows what data can be obtained from them. The Record shared an FBI training document that reveals the surveillance capabilities of the US law enforcement detailing which data can be extracted from encrypted messaging apps. ” reads the document.

Encryption 143

Encryption FOIA Access Metadata 143

DLA Piper Privacy Matters

NOVEMBER 29, 2021

On 16 November 2021, the French data protection supervisory authority (the “CNIL”) published a practical guide (“Guide”) on Data Protection Officers (“DPOs”). Document properly the processing activities. the detail of the CNIL online DPO designation form and information to be communicated to the CNIL in that respect.

GDPR 116

GDPR Compliance Personal data Communications 116

IT Governance

JULY 11, 2022

Welcome to our second quarterly review of security incidents for 2022, in which we take a closer look at the information gathered in our monthly list of data breaches and cyber attacks. In this article, you’ll find an overview of the cyber security landscape from the past three months, including the latest statistics and our observations.

Data breaches 101

Data breaches Ransomware Phishing Government 101

Data Protection Report

APRIL 22, 2021

On April 14, 2021, the New York Department of Financial Services (NYDFS) announced a $3 million settlement with insurance company National Securities Corp. A threat actor gained access to an employee’s document management system account. Training and monitoring materials. NYDFS Cybersecurity Regulation.

Cybersecurity 94

Cybersecurity Financial Services Phishing Compliance 94

Info Source

SEPTEMBER 1, 2020

September 1 , 2020 – Integrated Document Technologies (IDT) has partnered with Kodak Alaris to create a cloud-based solution that helps department of motor vehicle agencies across the United States comply with REAL ID requirements. Beginning October 1, 2021, the U.S. INfuse requires no PCs, application software or staff training.

Compliance 52

Compliance ECM Information capture Cloud 52

IT Governance

JANUARY 26, 2022

According to the study, 48% of executive managers said that employees had received no cyber security training in the last two years. Meanwhile, 32% said they didn’t have a cyber security programme within their organisation and only half of organisations have a formal cyber security incident response plan.

Data breaches 102

Data breaches Phishing Access Passwords 102

Privacy and Cybersecurity Law

SEPTEMBER 15, 2021

It is no coincidence, therefore, that the European Commission’s “ Proposal for a Regulation laying down harmonized rules on Artificial Intelligence ”, published on April 21, 2021 (the Proposal), has several points of contact with the GDPR. Eager to know more?

Artificial Intelligence 52

Artificial Intelligence Personal data GDPR Compliance 52

IT Governance

MAY 5, 2022

But it’s also a growing reality, with Verizon’s 2021 Data Breach Investigations Report discovering that 61% of all data breaches involve stolen credentials. In this blog, we look at the advice that World Password Day has to offer and explain why now is the time to review your password security. Not so bad.

Passwords 98

Passwords Authentication Data breaches Security 98