After a long silence since guidance was last issued a year ago, there’s now widespread expectation that the Securities and Exchange Commission will get much more specific this year about new cybersecurity disclosures for public companies. Recent actions also signal the commission is paying close attention not just to disclosures, but to weaknesses that create cybersecurity risks at companies.
read more 
As massive data breaches continue to make headlines, companies of all sizes are focusing their efforts on information security. But before an organization can put security policies and procedures in place, they need a well-crafted information governance framework to properly manage valuable data and minimize risk.
read more In late 2018 the U.S. District Court of New Jersey indicted two Iranian men for allegedly running a hacking scheme that hit local and state governments as well as transportation agencies and hospitals across the U.S. The scheme involved infecting corporate networks with SamSam malware, which encrypted data on computers in the networks, then blackmailing the institutions by requiring a ransom payment in return for the decryption keys.
read more The General Data Protection Act has been making headlines for quite some time now, especially the potential fines that can be levied for non-compliance. Since the law’s recent enactment in May 2018, legal professionals and privacy advocates around the world have been waiting to see how countries will enforce GDPR violations. On January 21, 2019, France made one of the most significant moves to date by handing down an enormous fine to a major technology company who they deemed violated GDPR compliance protocols.
read more