LocalGov’s Post

While still being debated in committee hearings, if passed, Bill C-26 would empower the federal government to direct private companies in critical industries on cybersecurity matters. This article brilliantly highlights the concerns about the scope of government intervention and the potential impact on privacy rights. Indeed, legislators are struggling to ensure that the bill strikes the right balance between cybersecurity and privacy protection. With that said, what constitutes the right balance? What changes are coming in terms of IT compliance? And what industries will this affect the most? 

👉 UK | New laws for cyber crime protection ✅ Perhaps there are also some good ideas there for the EU to protect citizens more effectively against cyber crime. https://lnkd.in/dhditJ2a

U.S. Assistant Attorney General Matt Olsen disclosed that the DOJ has approved multiple requests to delay disclosure of material cybersecurity incidents by publicly traded companies to the SEC  https://lnkd.in/eGnZARTm. He would not disclose (1) how many requests have been made, (2) how many requests have been approved, (3) the type of incidents/vulnerabilities at issue, or (4) the threat actors involved (🇷🇺🇨🇳😉). Mr. Olsen, in his capacity as the head of U.S. Department of Justice National Security Division https://lnkd.in/eMtAFisS, has been delegated the authority to approve requests. What's most surprising is that the DOJ figured out an adjudication process for national security issues based on a fill-in-the-blank form https://sec8k.ic3.gov/. Resources: - FBI Request a Delay page: https://lnkd.in/exrwyGNj - U.S. Securities and Exchange Commission Delay Request Form: "To request a reporting delay, victim companies must contact the FBI directly by using the form below or through the U.S. Secret Service, the Cybersecurity and Infrastructure Security Agency, the Department of Defense, or another sector risk management agency." https://sec8k.ic3.gov/ - SEC Cyber Incident Disclosure FAQ: https://lnkd.in/evGJRfZu - WSJ Article: https://lnkd.in/eNJfxiyX #SCIFLIFE

Last month, I reported that the FTC published a final rule in the fight against fraud involving governmental impersonators (https://bit.ly/3wS6hXO). Now, FINRA’s Cyber and Analytics Unit (CAU) has issued an advisory to proactively warn member firms of continuing social engineering campaigns involving fraudulent representations of individuals purporting to be FINRA representatives.  In the advisory, FINRA provides that these social engineering campaigns may be reported to it by contacting the firm’s Risk Monitoring Analyst or filing a regulatory tip. Additionally, FINRA advised that when campaigns impersonating firms or associated persons are identified, firms can:  👉Report the campaigns to state and local law enforcement and regulatory agencies.  👉Notify the Federal Bureau of Investigation (FBI) via the nearest FBI field office or by filing a complaint with the FBI Internet Crime Complaint Center (IC3.gov). 👉Notify the Securities and Exchange Commission (SEC).  👉File a complaint with the hosting provider and domain name registrar to request the site be taken down. 👉Warn investors of the impersonation scam via posts to the firm’s website or direct emails.   #cybersecurity, #finra, Read more in the FINRA advisory: https://lnkd.in/eNTbEWuh

Regulatory Challenges: Navigating Legal Frameworks in Penetration Testing Consumers’ worries about data security have increased due to the growing threat of cybercrime and high-profile data breaches. Read More...https://lnkd.in/gMu9ukjt #secuzine #Regulatory #Challenges

South Sudan's cabinet forwards The cybersecurity and computer misuse bill to the parliament for deliberation. Key takeaways for Service providers include; 1. Store, keep data for a period of up to 180 days. 2. Take reasonable steps to inform its clients on cybercrime trends which may affect them. 3. Disclose abuses to the concern clients and relevant authorities. 4. Maintain confidentiality of the data saved and stored and not disclosing it without an order from a competent judicial authority.

🔒 It’s Data Privacy Day! At TIAA Ltd we understand the importance of protecting your valuable data. 💻✨ Today, we want to remind everyone about the significance of safeguarding personal information online. With the increasing threats in the digital world, it is crucial to ensure your data remains secure and private. 🔍 Visit our website to discover our key advice for organisations https://bit.ly/493yOrH Don't wait for a data breach to happen – take proactive measures to protect your sensitive information! #DataPrivacyDay #ProtectYourData #ITAuditServices #DataPrivacyServices #SecurityMatters #DigitalPrivacy

All wrapped up at Security and Policing 2024. We had a brilliant time meeting new people and getting a chance to introduce our immutable, blockchain-enabled products, as well as our digital transformation services. In an era where digital disinformation is expected to become a major threat (as pointed out in the Global Risks Report by the World Economic Forum), use our Mea - Digital Evidence Integrity products to retain a digital chain of custody of your evidence. If we didn't get a chance to speak at Security and Policing, get in touch with our team using the link in the comments 🔽 #securityandpolicing #securityandpolicing2024 #policing #homeoffice #digitalevidence CPI OpenFox Dutch Ridge Consulting Group (DRCG), LLC Lockdown Cyber Security

kudos to the #UK #Government! (UK Civil Service) UK is applying from today a new #law that sets a #minimal information #security (#cybersecurity) #standards regarding #authentication for #consumer physical #devices, in the spirit of this project - DIAF - Default is a FAULT! (https://lnkd.in/eRrHCPzx), hence preventing too-simple and well known #passwords, to make attackers' lives harder. This is a much-needed and a first of its kind (AFAIK) law that other governments need to follow ASAP. We have so many rules to standardize #safety in products of the physical world (e.g. against risk of electric, chemicals, etc.) but not for the #digital world - we need to step up our national laws to at least match the current protection state for physical products. "Press release New laws to protect consumers from cyber criminals come into force in the UK" https://lnkd.in/exSqR589

UK government introduces new laws to combat cyber threats, effective from April 29, 2024. Here's what you need to know: 1. Password Protection: Common passwords like "admin" or "12345" are prohibited, aiming to enhance consumer device security and safeguard UK homes from cyberattacks. 2. Legislative Framework: Mandated by the Product Security and Telecoms Infrastructure (PSTI) Act 2022 and subsequent 2023 Regulations, the law sets minimum security standards for consumer products. 3. Enforcement and Penalties: The Office for Product Safety and Standards (OPSS) will enforce compliance, with fines of up to £10 million or four percent of global turnover for violations. Read more: https://lnkd.in/djvMYuAR #CyberSecurity #UKLaw #ConsumerProtection #European #GovernmentLaw