In the days following the latest Facebook scandal, in which we learned that Cambridge Analytica collected and misused the personal data of potentially 50 million American Facebook users, we have seen: A large social media […]
Getting Ready for GDPR – A Critical Activity Checklist
The implementation deadline for the European Union General Data Protection Regulation (GDPR) is coming soon. Most of us in the US are probably not yet ready for the potential business impact of the new European […]
GDPR – Applicability for US SMBs
I run a small US-based business. I don’t see GDPR ever applying to my company. Can I just ignore it? Our clients and business partners frequently ask whether the European Union General Data Protection Regulation […]
Cybersecurity Act of 2015 – Business Compliance is Optional?
The US Cybersecurity Act of 2015 introduced new initiatives that will strengthen the Federal Government’s cybersecurity defenses, and furthers collaboration between Government and Business in the fight against cyber threats, although under this law, Business is […]
An InfoSec Manager’s Guide to the Cybersecurity Act of 2015
A practical understanding of the Cybersecurity Act of 2015, with information security and privacy implications for Contractors. As part of the $1.1 trillion omnibus spending bill (H.R. 2029) that President Obama signed into law […]
Records Retention for the Long Term
Records Retention Standards often omit data provided in response to e-Discovery requests. Although media and communication protection policies govern the proper security of the data you provide to the requestor (media use, transmission and encryption […]