Topic
Incident Response
217 published works
Data Privacy + Cybersecurity Insider
DOD U.S.-CERT Cybersecurity Incident Reporting for Defense Contractors Effective April 1, 2017
New U.S. Computer Emergency Readiness Team (U.S.-Cert) guidelines around incident reporting went into effect this week (April 1, 2017). The guidelines require all federal departments and agencies, state, local, tribal and…
Louisiana Law Blog
OCR Settlement Highlights the Importance of Timely Breach Notification
By Kean Miller
By the Kean Miller Health Law Team On January 9, 2017, the U.S. Department of Health and Human Services Office for Civil Rights (OCR) announced its first HIPAA settlement arising…
Health Care and Life Sciences
Untimely Breach Notification Leads to Significant HIPAA Settlement
By Lisa Pierce Reisz, J. Liam Gruzs, Robin Canowitz
The U.S. Department of Health and Human Services (“HHS”) Office of Civil Rights ("OCR") recently announced its first HIPAA settlement based on the untimely reporting of a breach of unsecured protected health…
Focus on the Data
Latest on the FTC Data Security Front
By Tanya Forsheit, Daniel Goldberg
On October 25, 2016, the Federal Trade Commission (FTC) issued a guide — Data Breach Response: A Guide for Business — on steps companies should take in responding to a data…
Global Privacy & Security Compliance Blog
Prevent and Prepare for a Cybersecurity Breach
By Jennifer Archie, Gail Crawford, Andrew Moyle, Serrin Turner, and Brian Meenagh Hacking of organizations’ systems is becoming increasingly commonplace, even with advancements in security practices. To mitigate risk, a…
China Law Insight
金杜入选中国证券投资基金业协会首批入会核查专业中介服务机构名单
By King & Wood
作者：金杜律师事务所 9月28日，在中国证券投资基金业协会（简称“协会”）公布的第一批入会核查专业中介服务机构名单中，金杜律师事务所被选定为“入会核查专业机构”的四家律所之一，并成为入选“专项核查专业机构”的唯一一家律师事务所。协会此次根据合法合规和诚信记录等条件，参考首批145家入会核查机构分布情况，对律师事务所和会计师事务所分别排序，按照从事基金业务规模从大到小，地理位置由近及远等标准，最终选定了第一批的七家核查机构。 On 28 September, the Asset Management Association of China (AMAC) published its first list of professional agencies for admission inspection, to which King & Wood Mallesons (KWM) was…
Internet, IT & e-Discovery
Cyber Pain Points: Failure to get buy-in for Incident Response Plan (IRP) in the top 10!
By Peter Vogel
A recent report indicated that IRPs “are frequently developed from within departmental silos, for example, within the organization’s IT security function, and do not address the considerations of business units…
Data Privacy + Cybersecurity Insider
White House Directive Outlines Who to Call for Help with a Cyber Incident
Last week, the White House issued a new directive that outlines how the government handles significant cyber incidents, which gives the public information on which agency to call in the…
Inside Privacy
White House Releases Presidential Policy Directive on U.S. Cyber Incident Response
The White House has released a Presidential Policy Directive on United States Cyber Incident Coordination (PPD-41). PPD-41 is part of President Obama’s broader Cybersecurity National Action Plan, which was unveiled…
Internet, IT & e-Discovery
Experienced outside counsel should be part of your Incident Response Plan (IRP) for cyber intrusions!
By Peter Vogel
Darkreading recommended that an IR team should include “outside legal counsel that possess specialized experience in cybersecurity and data breach responses” and key stakeholders from all applicable areas of the…