Articles Tagged with ''data security''

Privacy predictions for the enterprise for 2021

Predictions on privacy within your enterprise for 2021

October 30, 2020

Forrester Research Inc. has laid out some of its predictions regarding privacy in 2021. Among those predictions include a 100% increase in regulatory and legal activity related to employee privacy, a significant change in whom privacy leaders report to within the enterprise and more.

Sixty percent of organizations have accelerated zero trust projects in response to COVID-19

October 28, 2020

New research finds that the main difference between those who were successful in moving their Zero Trust initiatives forward were those that started out with formalized Zero Trust projects. Those that had dedicated budgets and formal initiatives (69%) were far more likely to continue accelerating those projects throughout the pandemic, while those that had ad hoc Zero Trust projects were more likely to stall progress or stop entirely.

Limiting Access Is the First Step to Securing Networks, cyber security news, NIST Cybersecurity Framework, access management

Data protection report finds decline in information security training and policies may negatively impact US businesses

October 26, 2020

Shred-it announced the release of its 10th Anniversary Edition Data Protection Report (formerly known as “The Security Tracker: State of the Industry Report”), which outlines data security risks threatening U.S. enterprises and small businesses. The findings are based on a survey conducted by Ipsos, shedding light on trends in data protection practices and the risks American businesses, organizations, and consumers face related to keeping their data secure.

Insider threat: FBI releases a video for chief security officers

Stopping the insider threat: FBI releases a video for CSOs

October 14, 2020

A 30-minute movie, inspired by true events, called “The Nevernight Connection," details the fictional account of a former U.S. Intelligence Community official targeted by foreign intelligence service via a fake profile on a professional networking site and recruited to turn over classified information.

Only 1 in 4 global organizations keep cardholder payment data secure

October 7, 2020

With many companies struggling to retain qualified CISOs or security managers, the lack of long-term security thinking is severely impacting sustained compliance within the Payment Card Industry Data Security Standard, according to new study.

mergers and acquisitions continue virtually amid COVID-19

Study says virtual dealmaking will continue post-pandemic, regardless of security concerns

October 6, 2020

Organizations are still making deals and mergers and acquisitions. Many are doing virtual deals; but the move comes with security concerns, says Deloitte report.

New York’s investigation of Dunkin Donuts results in a promise to abide by the SHIELD Act’s requirements

Erik Dullea

October 2, 2020

The New York Attorney General’s Office (NYAG) reached a Consent and Stipulation Agreement with Dunkin’ Brands, Inc. (Dunkin), which obligates the company to implement and maintain a comprehensive information security program to protect customers’ private information. The terms of the consent agreement are similar to the terms New York reached with Zoom earlier this year regarding inadequate data security practices, and strongly resemble the reasonable security measures described in the Stop Hacks and Improve Electronic Data Security Act (SHIELD Act).

Combating Complacency: Getting the Most Out of Your Data Breach Response Plan

What U.S. companies should know about LGPD – Brazil’s new General Data Protection Law

LGPD is a complicated regulatory regime that will required U.S. entities subject to its requirements to undertake substantial compliance efforts.

David M. Stauss

September 23, 2020

As documented in Dirceu Santa Rosa’s article for the IAPP’s Privacy Tracker, efforts to delay the effective date of Brazil’s General Data Protection Law – Lei Geral de Proteção de Dados or LGPD – recently failed, and the law is expected to go into force in the coming days. Brazil’s federal government also published a decree approving the regulatory structure of the Autoridade Nacional de Proteção de Dados, i.e., Brazil’s national data protection authority.

Reexamining data privacy and protection amid COVID-19

As proposed legislation unfolds, security and privacy professionals should prepare to face the implications of greater responsibility and risk when it comes to data privacy.

Ed Holmes

September 23, 2020

What are four aspects that security and privacy professionals need to consider to ensure the balance of privacy and safety in data regulations?

Compliance regulators don’t stop working when companies go remote

Jeff Sizemore

September 18, 2020

Compliance regulators don’t take days off – not even in a pandemic. Faced with steep penalties for non-compliance and potential reputational damage, organizations are being forced to rethink their compliance strategies to account for new and emerging risks. For digital businesses today, the best place to start is by assessing how systems should be good enough, understand how data integrity is currently being managed, identifying any compliance hazards or gaps, and considering how automation can help address them.

The 2026 threat environment will be louder, faster, and more interconnected. The most pressing risks, from global political volatility to emerging tech disruptions, will challenge organizations to act amid ambiguity and protect credibility in an era of accelerating uncertainty.