Well-intentioned organizations trying to implement cybersecurity best practices can quickly become discouraged by the ocean of rules, guidance, and standards. The National Institute of Science and Technology (“NIST”), the Federal Financial Institutions Examination Council (“FFIEC”), National Association of Insurance Commissioners
Iowa Cybersecurity Law Blog
The Iowa Cybersecurity Law Blog, published by Dickinson, Mackaman, Tyler & Hagen, P.C., focuses on legal issues related to cybersecurity, data breaches, and privacy within the financial and banking sectors. It covers topics such as regulatory compliance for financial institutions, fraud prevention and liability in wire transfers, the legal implications of emerging technologies like stablecoins, and risk management strategies for banks and businesses. The blog also addresses the intersection of cybersecurity with banking law, including anti-money laundering and consumer protection laws, and provides updates on relevant legislation and court rulings affecting cybersecurity and financial fraud.
Latest from Iowa Cybersecurity Law Blog - Page 8
Don’t Let Cyber-Vulnerabilities Be Eternal
By John Lande
One of the easiest ways to prevent a cybersecurity incident is to ensure that software patches are implemented. Despite this straightforward technical advice, many organizations still fail to routinely and regularly implement software patches. The New York Times recently reported…
Don’t Let Cyber-Vulnerabilities Be Eternal
By John Lande
One of the easiest ways to prevent a cybersecurity incident is to ensure that software patches are implemented. Despite this straightforward technical advice, many organizations still fail to routinely and regularly implement software patches. The New York Times recently reported…
Bank to Customer: We’re Not Your Insurance Company
By John Lande
Cybersecurity incidents routinely grab headlines, and for good reason. These incidents often lead to exposure of large volumes of sensitive data, or significant monetary losses. For example, this blog previously discussed how fraudster access to online banking platforms could lead…
Bank to Customer: We’re Not Your Insurance Company
By John Lande
Cybersecurity incidents routinely grab headlines, and for good reason. These incidents often lead to exposure of large volumes of sensitive data, or significant monetary losses. For example, this blog previously discussed how fraudster access to online banking platforms could lead…
Coming Soon to a State Near You: Cybersecurity Regulation
By John Lande
Ever since the New York Department of Financial Services (“NYDFS”) enacted its cybersecurity regulation for financial institutions and related organizations, other states have started to enact cybersecurity regulations of their own. South Carolina became the latest state to enact a…
HHS Releases Cybersecurity Threat Mitigation Guide
By John Lande
The Department of Health and Human Services (“HHS”) has released the “Health Industry Cybersecurity Practices: Managing Threats and Protecting Patients” guide. The publication contains a comprehensive summary of cybersecurity threats for the healthcare industry, and technical details for mitigating…
Fraudsters May Determine Whether You Have Cyber-Insurance
By John Lande
Many organizations are surprised to learn in the wake of a cyber-incident that their “cyber” insurance does not cover their losses. Very often this is because fraudsters’ method for committing fraud may not have been the type of risk that…
Auto-Update Leads to Auto-Hack
By John Lande
News broke recently that hackers exploited a backdoor to as many as 1 million ASUS computers by compromising the ASUS automatic update system. Hackers planted the malware in the system that pushes out software updates to ASUS computers. Automatic updates,…
The $2 Million Phish
By John Lande
Earlier this year, the Tokyo fish market grabbed headlines when a blue fin tuna sold for a record $3 million. Less well publicized was a phish that reeled in $2 million for fraudsters from the city of Farmington, Connecticut in…