At the 2015 RSA conference, Commissioner Aguilar’s Chief of Staff, Smeta Ramarathnam, participated in a panel titled “Full Disclosure: What Companies Should Tell Investors About Cyber Incidents.” While Aguilar’s emissary reminded us of the importance of general cybersecurity risk disclosure, her message focused upon the disclosure of breach events, stating that the [...]
Evidence continues to mount for broad acceptance of NIST CSF Action Item: Executives, General Counsels, Compliance Officers, and Board Members, across industries, should consider these principles. Last week (April 17, 2015), the National Association of Insurance Commissioners (NAIC) adopted twelve basic principles to provide guidance to insurers, producers, and other regulated entities. [...]
A cybersecurity event has occurred at your firm. Your team is deep into its incident response plan. Procedures that you put in place and have tested and improved over the years are flowing relatively smoothly to their conclusion. Forensics staff have been brought in to determine how the incident occurred, law enforcement [...]
Most companies have a cybersecurity plan of sorts in place already. When we speak, in general terms, about the first three key functions in the NIST Cybersecurity Framework, “Identify”, “Detect”, and “Protect”, we are met with understanding. After all, these categories make sense to all of us. Identifying those assets that need [...]
On March 26th, two days after our “Current State of Affairs” post for the Legal Industry, the New York Times reported on an internal Citigroup memo discussing specific breach and security shortcomings at Law Firms.[1] Further, an April 8th Dealbook piece is again discussing Law Firms as vendors to major banks and Wall St. Firms who must [...]
Diligent CCOs know by this point that they have some responsibility when it comes to the security of their firm and its information. Most are only too painfully aware that within the heading of security, they must be informed on the topic of cybersecurity. But from where does this impetus derive? A [...]