Engaging the Board on Cybersecurity
Corporate Boards of Directors (BOD) may soon be required to disclose their level of cybersecurity expertise. The recently-introduced Cybersecurity Disclosure Act (S.2410) would direct the SEC to work out the details of making publicly-traded companies “comply or… Continue reading
How to Drive Successful DLP Projects
DLP initiatives are on the horns of a dilemma: IT can’t enforce the rules unless the business backs it up. Without the business on board, data protection is quite difficult. However, successful DLP programs have bridged this gap through… Continue reading
Regulations Create a False Sense of Security
We are approaching a very tenuous era with respect to both corporate and individual privacy, and you shouldn’t be surprised to see a lot of dominoes fall over the next few years. I believe there are two key reasons data… Continue reading
Transitive Liability: Balancing HIPAA and Meaningful Use
Just recently, the U.S. Health Information Portability and Accountability Act (HIPAA) grew sharper teeth and a longer arm. On January 2013, the Health and Human Services (HHS) department published what is referred to as the Omnibus Rule, reinterpreting the Act.… Continue reading