Industry Regulations

Continuing a discussion kicked off earlier this week in the Senate, House lawmakers confirmed that legislation is in the works, pushing for answers on the balance between liability protection and the duty to protect consumers.

Historically, ransomware was not seen as government's problem any more than shoplifting: a crime against businesses that federal law enforcement saw as beyond its domain. But that may be changing.

There is no rule mandating a company to disclose a breach to the federal government, even when national security is a concern. That could change, however. In the words of Microsoft President Brad Smith, "this is about moving information fast, to the right place, so it can be put to good use."

In Episode 2 of the CISO Stories podcast, Sam Curry, chief security officer at Cybereason, interviews Ari Schwartz, managing director for cybersecurity at Venable, about the proposed policy changes the Cybersecurity Coalition plans to bring up to members of Congress.

Today’s columnist, Borya Shakhnovich of airSlate, says companies such as Facebook have extended work-from-home plans and likely embrace automation. He says companies facing employee burnout from work-from-home policies will find that automation paves the way to enterprise security.

Today’s columnist, Mary Braunwarth of NetSPI, notes that falling short on regulatory requirements can put companies on the hook for hefty fines, such as in the case of Citibank, which was fined $400 million by the U.S. Treasury Department.

The appointments and presumed future appointments draw heavily from people with public sector experience, a move that some praise and others criticize as a failure to consider private sector expertise.