In a growing number of cases – including some involving Google Nest microphones for the home and airplane cameras found on back of passenger seats – surveillance devices are deployed haphazardly without thinking about the way they might intrude into people’s lives and privacy.
SaaS applications are not going anywhere, and we must face the fact that they have access to our company’s most sensitive data. With SaaS, the shadow IT challenge has expanded and deepened even further.
Remote work and remote hiring didn’t just change where people sit. They changed how trust is established.
What kind of future can be achieved by focusing on the nexus of information security and data privacy? Better compliance, stronger alignment and greater accountability, just to name a few benefits.
Perfectly targeted advertising is just information. It reduces or distills the noise down to information which is welcomed by the recipient. What does this have to do with your threat intelligence program? Everything.
Even though NYPA has failed to pass legislation, all is not lost for data privacy as the introduction of Dashboard Act will require commercial data operators to disclose and assess the value of data collected from users.
Bypassing of security during the successful heist of the Bellagio vault came down to identity and perimeter defenses, the main vulnerabilities of network security—and exactly the weaknesses that zero trust methodology fortifies for organizations.
The Ohio law represented a novel approach to data protection by providing safe harbor if the entity’s cyber security program conforms to industry recognized cybersecurity frameworks or federal regulations cited in the Act.
Ransomware operators have long targeted systems and data availability of their victims, and have been evolving their attack patterns to include the privacy and confidentiality of victim data as well. Attackers are increasingly pushing for double and sometimes triple extortion of their victims.
With specific guidance from an amended HITECH Act to include a comprehensive cyber policy, the healthcare industry will better secure patients’ data.










