Bob Schiff

We’ve just published a new blog on our website by Matthew Sherrod titled "Complex State Data Privacy Laws: Rhode Island's New Regulation". In this post, Matt breaks down Rhode Island's latest data privacy laws and what they mean for us. Check it out and let us know what you think. #dataprivacy #rhodeisland #compliance Read the blog here: https://lnkd.in/ghkGY_VV

5

What is the process for adopting technology as it relates to ISR/WAIRE? How do we implement that technology to not only remain compliant but also add value? Hear what Bart A. De Muynck has to say on the subject from our recent webinar "Staying Ahead of Compliance Curves in the Yard"! eaigle.com

7

Check out our latest #Privacy, #Cyber & #DataStrategy blog post by Cara Peterman, Sierra Shear, and Lance Taubin on the SEC’s further guidance regarding disclosure of cybersecurity incidents on Form 8-K. https://bit.ly/3WUgxth

9

In this week's #AI governance series: 📍Putting the Map function in the NIST's AI Risk Management guidelines into practice. Data privacy experts David Manek, CPA, CIPP, CIPM, Kenric Tom, and Colleen M. Yushchak explain how to use the Map function to help your organization manage AI compliance ⤵ https://ankura.co/3VHBtTP Follow our page to view our next article focusing on the Measure function.

15

Are you a small business in Massachusetts that handles the personal information of Massachusetts residents? 🤔 Then you need to comply with Mass Data Security Laws which require every business, regardless of size, have a Written Information Security Program (WISP). Learn more about this important data security law: https://hubs.li/Q02rjkPz0 #Cybersecurity #DataPrivacy #WISP #NBM

5

Paul Asadoorian from our partner Eclypsium, Inc. recently shared an insightful article on Dark Reading, "Why CVEs Are an Incentives Problem". He highlights critical issues with the current CVE reporting system, where incentives can lead to a flood of less significant vulnerabilities, making it harder to focus on the truly critical ones. At NetRise, we understand these challenges. That's why we enrich our vulnerability data with hundreds of sources of threat intelligence and empower our customers to prioritize in more effective ways than CVSS alone. Leveraging EPSS, the CISA KEV and other threat intelligence like ransomware and threat actor attribution allows security teams to cut through the noise and tackle the most pressing threats more effectively. Click the link below to learn more about the challenges in CVE reporting and the importance of smarter vulnerability prioritization. #CVE #NetRise #Eclypsium #EPSS #ThreatIntelligence #CISA #SCRM

7

Rapid7 has successfully completed an Information Security Registered Assessors Program (IRAP) assessment to PROTECTED Level for several Insight Platform solutions. Learn more about the assessment in a new blog: https://lnkd.in/eHM9iY8A

2

“We’re not asking organizations to start from scratch,” says Isaac E. Roybal, Seclore CMO, during a conversation at the RSA Conference with Byron Acohido. While digital rights management (DRM) has evolved significantly since the 1990s—there's still substantial progress to be made to ensure enterprise data is always protected. The future of digital rights management is data-centric security. For more insights on Seclore's data-centric approach, and what lies ahead for the data security landscape, check out the article here: https://lnkd.in/eRGZDHf2 #Seclore #DRM #RSAC #DataCentricSecurity 

5

🔐 Navigating NYDFS Cybersecurity Regulations: A Strategic Guide for Class A Companies 🔐 We're excited to share our latest series of blogs with "Understanding NYDFS Cybersecurity Regulations: A Primer for Class A Companies." As New York continues to lead with stringent cybersecurity regulations, understanding and complying with these standards is crucial for major financial institutions. Key Takeaways: - Who's Affected: Class A companies, defined as large financial entities, play a pivotal role in the financial ecosystem and face significant cybersecurity demands. - Core Requirements: The NYDFS mandates include robust governance, strict technical controls, and comprehensive risk assessments, all designed to strengthen the security infrastructure. - Challenges Ahead: Compliance demands substantial investments in technology and expertise, with heightened accountability from executive certifications. - Strategic Compliance: Best practices include enhancing board engagement, continuous risk management, and investing in technology and talent to build a resilient cybersecurity framework. Navigating these complex regulations requires not just effort but strategic foresight. Avertro offers the tools and expertise necessary to not only meet but exceed NYDFS cybersecurity standards, providing a clear path to compliance and enhanced security measures. Read the Blog: https://lnkd.in/gcxhXVYa #NYDFS #Cybersecurity #Cybergovernance #Riskmanagement #compliance

3

How can the newly published Artificial Intelligence Risk Management Framework from U.S. NIST help organizations manage the risks of AI systems throughout their lifecycle? Kip Boyle of Cyber Risk Opportunities LLC offers his perspective. https://hubs.li/Q02x0-P80

14

2 Comments

NIST SP 800-161 outlines a specialized framework dedicated to enhancing cybersecurity within the supply chain and is a gold standard for cybersecurity risk management. 🏗️ We examined the applicable controls and created this checklist to help you benchmark your TPRM program against relevant NIST supply chain risk guidelines. https://lnkd.in/eYtB7qNN SP 800-161 provides guidance to organizations on identifying, assessing, and mitigating cybersecurity risks throughout the supply chain at all levels of their organizations. The guide also integrates cybersecurity supply chain risk management (C-SCRM) into risk management activities by applying a multi-level, C-SCRM-specific approach, including guidance on the development of C-SCRM strategy implementation plans, C-SCRM policies, C-SCRM plans, and risk assessments for products and services. Our guide will enable you to: 🧭 Uncover applicable guidance for TPRM professionals 🚛 Discover best practices for achieving stronger supply chain security detailed in NIST SP 800-161 🛡️ Integrate cybersecurity supply chain risk management (C-SCRM) into risk management activities with a multi-level approach Download the guide now to start aligning your TPRM program with NIST's recommendations on supply chain cybersecurity. #TPRM #RiskManagement #NIST #SupplyChainRisk

6

In episode five of the ActiveState Podcast, #cybersecurity experts Nicole Schwartz and Dana Crane discuss essential strategies for protecting the #OpenSource ecosystem. https://bit.ly/3xU70bM They delve into the growing threat of #SupplyChainAttacks, the importance of understanding the origins of open source components and effective ways to mitigate these risks. Episode five explores: ▶ The role of #AI in security ▶ The necessity of timely patching ▶ The benefits of outsourcing open source management to enhance productivity and security ▶ How collective responsibility can foster a more secure and efficient open source community 📺 Watch the full episode on Techstrong.tv: https://bit.ly/3xU70bM

11

E-discovery requests and internal investigations can happen at any moment. And they can come with specific legal time frames. Proofpoint Discover modernizes the orchestration of your response to #ediscovery requests through powerful data visualization. Learn more: https://ow.ly/FOp250St6c8 #archive #compliance #datavisualization

6

Stay up to date with how Electronically Stored Information (ESI) protocols are embracing generative AI. An article by JND Legal Administration, summarized by Today's Managing Partner discusses how these technological advancements are changing the data landscape: https://bit.ly/3Uxlsxt #AI #generativeai #ESI #legaltechnology #managingpartner

1