Krebs on Security

JANUARY 25, 2022

.” According to the Native American Financial Services Association (NAFSA), a trade group in Washington, D.C. But if recent events are any indication, legal landscape is shifting towards increased accountability and transparency.” According to Buckley LLP , a financial services law firm based in Washington, D.C.,

Financial Services 214

Financial Services IT Data breaches Passwords 214

Hunton Privacy

JANUARY 3, 2017

On December 28, 2016, the New York State Department of Financial Services (“DFS”) announced an updated version of its cybersecurity regulation for financial institutions (the “Updated Regulation”). The Updated Regulation will become effective on March 1, 2017.

Cybersecurity 40

Cybersecurity Financial Services Authentication Information Security 40

ARMA International

APRIL 18, 2022

Definition and Purpose of a Records Retention Schedule. Certain sectors, such as banking, financial services, health, and insurance have their own data protection and privacy requirements. 8 This is the GDPR definition and other countries have similar broad definitions of personal data.

Personal data 100

Personal data GDPR Privacy Records Management 100

HL Chronicle of Data Protection

JUNE 14, 2019

In this presentation, Hogan Lovells partners Mark Brennan and Bret Cohen will explore the impact of the CCPA including: Key terms used by the law that are fundamental to planning compliance – including broad definitions of “personal information” and “sale”; How the act will interact with existing regulations covering organizations in healthcare, (..)

Privacy 40

Privacy GDPR Compliance Financial Services 40

Data Matters

MARCH 12, 2019

Of particular note, the Safeguards Rule NPRM proposes to align the FTC’s requirements with those of the New York Department of Financial Services (“NYDFS”), as found in its cybersecurity regulations, and the National Association of Insurance Commissioners (“NAIC”), as found in its insurance data security model law.

Privacy 67

Privacy IT Information Security Insurance 67

HL Chronicle of Data Protection

DECEMBER 7, 2018

This blog post provides background on the scope of the exemption and an overview of key considerations for financial institutions developing CCPA compliance programs. The financial services industry is one of the most heavily regulated industries when it comes to protecting the privacy of personal information. Background.

Privacy 40

Privacy Financial Services Compliance Data breaches 40

HL Chronicle of Data Protection

MARCH 14, 2019

The plan must enable FIs to promptly respond to and recover from security events affecting customer information. It must also address the goals of the plan, internal processes for responding to a security event, and documentation and reporting regarding security events and related incident response activities.

Privacy 40

Privacy Risk Cybersecurity Information Security 40

DLA Piper Privacy Matters

JULY 30, 2019

Some states – such as Alabama, Massachusetts and New York (for financial services companies) – prescribe particular requirements of a “reasonable” cybersecurity program. At least nine states expressly extend these requirements to service providers.

Data breaches 45

Data breaches Cybersecurity Financial Services Risk 45

HL Chronicle of Data Protection

NOVEMBER 15, 2018

The second scenario is invoked in the event of the UK being granted adequacy. Article 71(3) creates a backstop in the event of a finding of adequacy being withdrawn or invalidated, committing the UK to ensuring a level of protection of personal data “essentially equivalent” to that under EU law. Definition of Union law.

GDPR 40

GDPR Personal data Government Financial Services 40

Data Matters

DECEMBER 23, 2020

Generally, if finalized, the NPR would require banking organizations and bank service providers (each, as defined further below) to provide accelerated notices of certain cybersecurity and related events. Definition of Subject Entities: . bank holding companies and savings and loan holding companies, state member banks, the U.S.

Security 67

Security Cybersecurity Insurance Communications 67

DLA Piper Privacy Matters

AUGUST 23, 2021

Definition of Personal information and Sensitive Personal information “Personal information” means any kind of information relating to an identified or identifiable natural person, either electronically or otherwise recorded, but excluding information that has been de-identified or anonymised. This aligns with the new Data Security Law.

Data Privacy 111

Data Privacy Privacy Compliance Analytics 111

Data Protection Report

APRIL 9, 2024

For example, government contractors or subcontractors with reporting obligations to the DOD or DOE for cyber incidents, or financial services entities that are already required to report cyber incidents to their primary federal regulator would be considered “covered entities” under the CIRCIA.

Ransomware 84

Ransomware Agriculture Cybersecurity Government 84

Data Matters

MARCH 21, 2022

The reporting requirements will cover multiple sectors of the economy, including chemical industry entities, commercial facilities, communications sector entities, critical manufacturing, dams, financial services entities, food and agriculture sector entities, healthcare entities, information technology, energy, and transportation.

Ransomware 95

Ransomware Cybersecurity Agriculture Communications 95

IBM Big Data Hub

NOVEMBER 29, 2023

Financial Services clients are increasingly looking to modernize their applications. Moreover, many of these financial services applications support regulated workloads, which require strict levels of security and compliance, including Zero Trust protection of the workloads.

Cloud 89

Cloud Financial Services Security Compliance 89

DLA Piper Privacy Matters

MARCH 3, 2023

The discussion paper, which acknowledges that the Australian Government was “ill-equipped” to respond to the large scale data breaches which occurred in 2022 (namely Medibank and Optus), emphasises the importance of protecting customer data and enduring that Australians can continue to access critical services in the event of a cyber-attack.

Data breaches 52

Data breaches Security Paper Financial Services 52

Data Protection Report

AUGUST 11, 2022

On July 29, 2022, the New York Department of Financial Services (NYDFS) announced a “pre-proposed outreach” of material proposed changes to almost every section of its cybersecurity regulations, and would affect each entity covered by the current regulations of 23 NYCRR Part 500. Cybersecurity Event Notification Would Expand.

Cybersecurity 59

Cybersecurity Risk Passwords Compliance 59

CGI

DECEMBER 18, 2018

Sibos is one of the biggest banking industry events and is run in a different location every year allowing the great and the good of the financial services world to get away from the office for a week and spend some time seeing what else is going on in the market. as part of the launch of the Trade Information Network.

Financial Services 40

Financial Services Encryption Marketing GDPR 40

Collibra

MAY 16, 2022

This want to commingle the solutions likely stems from the Gartner definition published in the Magic Quadrant for Data Quality Solutions, which rightfully states that data quality needs “identification, understanding[,] and correcting flaws in data.”. For financial services, data governance found its roots in risk.

Government 95

Government Risk Financial Services Access 95

ForAllSecure

JANUARY 19, 2022

That's quite a narrow definition. What can they do within the workforce, although this sort of job and sort of landscape we try and work out what they can do, which is the definition of authorization, essentially, this is Simon, what can he do today? Vamosi: And it’s not just in the work environment. I use a password manager.

Passwords 52

Passwords Authentication Access Data breaches 52

IT Governance

DECEMBER 11, 2023

Only 3 definitely haven’t had data breached. Publicly disclosed data breaches and cyber attacks: full list This week, we’ve found 83,463,951 records known to be compromised, and 210 organisations suffering a newly disclosed incident. 138 of them are known to have had data exfiltrated or exposed.

Data Privacy 84

Data Privacy Energy and Utilities Privacy Manufacturing 84

IT Governance

JANUARY 23, 2024

Only 1 definitely hasn’t had data breached. Publicly disclosed data breaches and cyber attacks: full list This week, we’ve found 130,036,285 records known to be compromised, and 116 organisations suffering a newly disclosed incident. 96 of them are known to have had data exfiltrated, exposed or otherwise breached.

Data Privacy 52

Data Privacy Privacy Manufacturing Security 52

ForAllSecure

APRIL 19, 2023

MUSIC] VAMOSI: So we talked about Unix as a definition of an early operating system. CODEN: They definitely could benefit for several reasons. But it's definitely a place where we see significant benefits of work. VAMOSI: Michael mentioned financial services. It's definitely not a product, it's a project.

Analytics 40

Analytics Communications Computer and Electronics IT 40

Reltio

MARCH 31, 2019

Aaron Zornes believes that Machine Learning will definitely play a bigger role in the modern MDM, increasingly solving scalability, complexity, and agility issues. If you missed this event, check out the video presentations here to get the latest buzz in the data management industry (Login: dd19@reltio.com | Password: berightfaster).

MDM 40

MDM Digital transformation Analytics Cloud 40

ForAllSecure

MAY 4, 2021

In a moment we'll hear about a cool new framework that MITRE developed it attempts to map potential threats by looking at past events and catalogs, all known tactics and techniques used by criminal hackers. Vamosi: ATT&CK also allows you to move to the next level to get ahead of the adversary ATT & CK based on past events.

Government 52

Government IT Access Analytics 52

ForAllSecure

MAY 4, 2021

In a moment we'll hear about a cool new framework that MITRE developed it attempts to map potential threats by looking at past events and catalogs, all known tactics and techniques used by criminal hackers. Vamosi: ATT&CK also allows you to move to the next level to get ahead of the adversary ATT & CK based on past events.

Government 52

Government IT Access Analytics 52