Popular, Cyber Incident Reporting, Incident Response Plans

SEC Imposes New Cybersecurity Requirements on BrokerDealers, Investment Companies, Registered Investment Advisers, and Transfer...

Latham & Watkins LLP on 8/9/2024

Covered institutions will need to review their cybersecurity and incident response policies and procedures ahead of the applicable compliance deadline. The Securities and Exchange Commission (SEC) recently adopted...more

New Cyber Regulations Define Battle Lines in Corporate and Infrastructure Security

HaystackID on 5/30/2024

Amidst an ever-evolving cyber threat landscape, a recent slew of regulatory updates and cybersecurity standards are defining a new battlefront for securing critical infrastructure and corporate data across varying sectors....more

UHG’s Breach Response May Prove Enlightening for Others

Health Care Compliance Association (HCCA) on 5/13/2024

Organizations typically deal with ransomware attacks out of the public eye, but the massive scale of United Healthcare Group’s (UHG) February breach made that an impossibility. UHG CEO Andrew Witty was recently on the hot...more

Florida Passes Cybersecurity Data Breach Immunity Law: 3 Things Businesses Need to Know – and 3 Things to Do

Fisher Phillips on 4/12/2024

Florida lawmakers recently passed a law that provides businesses with a defense to claims arising from “cybersecurity incidents” that lead to data breaches – so long as they meet a few critical obligations. The bill is...more

[Webinar] Practical Advice on the SEC Rule: Cybersecurity Incidents and Risk Management Disclosures - January 25th, 10:00 am PT

Clark Hill PLC on 1/19/2024

Are you prepared for the new SEC Rule on Cybersecurity Incident and Risk Management Disclosures? Don't let your business get caught off guard! This webinar will cover important points about the rule and how to effectively...more

The FTC’s Expanded Cybersecurity Requirements Affecting Non-Banking Small Businesses

Dunlap Bennett & Ludwig PLLC on 1/15/2024

The expansion of the FTC’s Safeguards Rule will require businesses to notify customers and the FTC of cyber breaches that had previously been excluded from reporting requirements. Previously, only banks had been required to...more

Cybersecurity - Cracking the Code on Upcoming Disclosures

Goodwin on 1/11/2024

As annual reporting season begins, it is important to take a fresh look at the company’s governance and incident response processes and develop risk-informed and compliant disclosures. While many companies are understandably...more

SEC Speech on Cybersecurity Disclosure

Paul Hastings LLP on 1/9/2024

On December 14, 2023, Erik Gerding, Director, Division of Corporation Finance at the Securities and Exchange Commission (“SEC”) gave a speech on the SEC’s final rules (the “Final Rule(s)”) regarding cybersecurity risk...more

FBI, DOJ and SEC Publish Guidance on Requesting Delayed Reporting of Material Cyber Incidents on Form 8-K: Takeaways for CISOs and...

Skadden, Arps, Slate, Meagher & Flom LLP on 12/20/2023

The U.S. Securities and Exchange Commission (SEC) adopted final rules in 2023 that are intended to enhance and standardize disclosures regarding cybersecurity risk management, strategy, governance and incident reporting by...more

Privacy Briefs: December 2023

Health Care Compliance Association (HCCA) on 12/8/2023

Report on Patient Privacy 23, no. 12 (December, 2023) Northwell Health in New York and Cook County Health in Chicago each experienced impacts from a breach at Nevada-based transcription company Perry Johnson & Associates...more

Network Topology and Mapping: Cornerstones of Data Security – Part 1

Bradley Arant Boult Cummings LLP on 11/30/2023

Data security is a top concern for organizations in today’s digital landscape. It protects data from unauthorized access, use, modification, or disclosure, and requires implementing technical, administrative, and physical...more

SEC Turning Up the Heat: SolarWinds and Its CISO Charged with Fraud Regarding Cyber-related Disclosures

Akin Gump Strauss Hauer & Feld LLP on 11/22/2023

Key Takeaways - With the SolarWinds enforcement action, the SEC continues to ratchet up its enforcement against companies that fail to properly disclose their cybersecurity incidents and risks. By naming the SolarWinds CISO...more

Data Breach 911: Five Immediate Steps to Take

Bradley Arant Boult Cummings LLP on 10/31/2023

For many, responding to an incident feels chaotic — questions swirling, uncertainties piling up, and no clear direction. Even when prepared with a well-rehearsed incident response plan, a data security incident places a...more

Stemming Losses That Go Uncovered by Cyber Insurance

Esquire Deposition Solutions, LLC on 10/25/2023

Twenty years ago the federal government designated October as Cybersecurity Awareness Month, part of an early effort to promote a wider appreciation of computer-related threats to business and government operations and to...more

Show Your Work: The SEC Cyber Rules and Documenting Materiality Analysis Under NIST FIPS 199

Baker Donelson on 10/24/2023

The date July 26, 2023, marks the latest evolution of the cybersecurity regulation landscape as the Securities and Exchange Commission passed cybersecurity regulations for publicly traded companies. At the open meeting, SEC...more

A Checklist for Cyber Incident Response Communications

Troutman Pepper on 10/16/2023

Popular file transfer tool MOVEit’s recent data security vulnerability prompted many businesses to communicate, internally and externally, about the impact of the incident on its business. Originally published in Law360 -...more

Privacy Briefs: October 2023

Health Care Compliance Association (HCCA) on 10/6/2023

Report on Patient Privacy 23, no. 10 (October, 2023) Kaiser Foundation Health Plan Inc. and Kaiser Foundation Hospitals will pay California $49 million to resolve allegations that they unlawfully disposed of hazardous waste,...more

[Webinar] Cybersecurity & Incident Response: 2023 Update on Best Practices for Detecting, Avoiding, Responding to a Cybersecurity...

Health Care Compliance Association (HCCA) on 9/28/2023

Learning Objectives: - Overview of current US privacy/cybersecurity laws and regulation - Current cyber threats: overview of recent trends in cyberattacks and risk areas for healthcare providers - Incident Response: how...more

SEC Proposes New Cybersecurity Rule and Amendments

Paul Hastings LLP on 3/30/2023

On March 15, 2023, the SEC issued proposed amendments and a proposed rule addressing cybersecurity. Specifically, the SEC proposed Rule 10, which addresses cybersecurity risks, and proposed to amend Regulation SCI and...more

What is a Data Breach? (And How Vulnerable is Your Business?)

Woodruff Sawyer on 3/20/2023

The landscape for preventing, responding to, and avoiding the fines and other costs associated with data breaches has changed in the last three years. Since the beginning of the pandemic, data breaches have been on the rise...more

Former Uber Chief Security Officer Convicted of Federal Obstruction and Concealment Crimes in Connection with Extortionate Data...

BakerHostetler on 10/12/2022

On October 5, 2022, a federal jury found Joseph Sullivan, Uber’s former chief security officer, guilty of obstruction of justice and misprision of a felony in connection with his role in responding to a 2016 data breach...more

Today's Popular Updates › Cyber Incident Reporting › Incident Response Plans