Shabbir Imber Safdar, CFE

Kaouthar Lbiati, MD : In the #GlobalSouth, the challenge for #policymakers, is to strike the right balance between #healthcare #systemsreforms, #lawenforcement, and preservation of #patientrights. To protect patients’ #datasecurity and #confidentiality, intricate collaborations among all stakeholders involved in the #governance and exploitation of the #Internet, nationally and internationally, are required. #Cybersecurity should neither compromise #digitalsovereignty nor hinder the transformative potential of the #healthsector through #technology or equity of participation of the global south in the #globaldigital #research and #economy. #healthtech #medtech #Digitaltransformation #electronichealthrecord #IoMT #interoperability #Cybercrime #cybersecurity #governance #GDPR #healthdiplomacy

3

1 Comment

In a memorandum issued by the Executive Office of the President addressing administration #cybersecurity priorities for the FY 2026 budget, the document identified that the OMB (Office of Management and Budget) and the ONCD (Office of the National Cyber Director, The White House Cyber Director) will jointly review agency responses to these priorities in the FY 2026 Budget submissions, identify potential gaps, and identify potential solutions to those gaps. These agencies will provide feedback to agencies on whether their submissions adequately address and are consistent with overall #cybersecurity strategy and policy, aiding agencies’ multi-year planning through the regular budget process. “Guidance on cybersecurity research and development priorities is included in the forthcoming joint memo from OMB and the Office and Science and Technology Policy on Multi-Agency Research and Development Priorities for the FY 2026 Budget,” Shalanda D. Young, OMB director and Harry Corker Jr., National Cyber Director, wrote in the memorandum, addressed to the heads of executive departments and agencies. https://lnkd.in/eVssedVn

26

Following up on its request for information (RFI) on cybersecurity regulatory harmonization and regulatory reciprocity, the Office of the National Cyber Director, The White House (ONCD) released a summary on Tuesday of the 86 responses received and the key findings. These came from representatives of 11 out of 16 #criticalinfrastructure sectors, alongside trade associations, nonprofits, and research bodies. Collectively, these respondents, many of whom are membership organizations, represent more than 15,000 businesses, state entities, and other organizations. Three key findings from the responses include that lack of #harmonization and #reciprocity harms cybersecurity outcomes while increasing compliance costs through additional administrative burdens. Many respondents noted that compliance spending drew resources from cybersecurity programs. It also found that challenges with #cybersecurity regulatory harmonization and reciprocity extend to businesses of all sectors and sizes and that they cross jurisdictional boundaries. Respondents highlighted inconsistent or duplicative requirements across international and state regulatory regimes. https://lnkd.in/gJjV_KKW

12

Healthcare industry groups are urging the federal government to streamline and loosen a recent proposed rule outlining #cybersecurity incident reporting requirements for entities considered to be critical infrastructure. Published in early April, the Cybersecurity and Infrastructure Security Agency’s proposed rule aims to implement the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (CIRCIA). The proposal’s enhanced and speedier reporting requirements aim to help the government “better understand the threats we face, spot adversary campaigns earlier, and take more coordinated action with our public and private sector partners in response to cyber threats,” CISA Director Jen Easterly said in a statement upon the proposed rule’s unveiling. CISA also noted that the changes would be timely for the #healthcare sector, which “routinely” faces cyber incidents. The agency specifies that its proposed rule would cover hospitals with 100 or more beds, critical access hospitals, the manufacturers of certain “essential” medicines, moderate-to-high-risk medical device makers and a broad swath of IT entities. International Association for Healthcare Security and Safety (IAHSS) ASIS International Stefanie Drysdale Adam Lee, MBA, M.S., CEM®

3

Health-ISAC Chief Security Officer, Errol Weiss, on Protecting the Healthcare Sector from Cyber Threats https://lnkd.in/eMUhrEZ3 "The reciprocal effect of sharing is that the victimized organization may learn from what other members of the community have seen and what they experienced. They may get some mitigation recommendations or support from others in the network that could help shorten the downtime." Topics covered: – From NSA to FS-ISAC to Health-ISAC – Communication challenges during a breach – From a legal risk decision to a business-based risk decision – 3 things health sector organizations can do to step up security – Risk acceptance and risk avoidance involving patching – About vendor partnerships – The current threat landscape in the health sector #healthit #healthsystem #ciso

27

2 Comments

I have a very laissez faire view of digital footprints — the kind that I’m sure will scare Glenn Gore and the most staunch arbiters of privacy. As a digital native, I see how my data identity has been used to the best of effects. My TikTok algorithm is a beautiful work of (relatable) art: my Instagram, an unending funnel of things I didn’t know I needed to buy. I’m quite certain I’ll go mad if one day my digital identity gets reset. Sometimes I wonder how it got to this. My logic is that my data is always being mined and used six ways come Sunday. It’s inevitable the more digitally connected we are. Today, with the rising trend of online scams, there’s an even higher need to protect and identify consumers. And how do you identify consumers? Through the exchange of data. It’s all very poetic really — the thing that will protect us is also the very thing that we need to surrender. It’s why I still retain mixed feelings about what Gore has to say about data: “At Affinidi, securing digital identities is a priority as we navigate an increasingly digitised society, ensuring individuals can confidently claim their digital existence.” But can we though? Do we need to? I’m not sure. For me, the digital data surrender is an inevitability, so the Internet might as well deliver me information that I need and may enjoy — like a tinted serum from Rationale or a pair of wide-leg pants from Marakech. Still, I admire Gore’s sense of hope with his North Star at the Temasek-funded firm — “Where your personal data is as intrinsic to you as your physical self and treated with the utmost respect and privacy.” Because in a world where data is as easy to mine, dole, and exchange as promises and opinions, hope is perhaps the very thing that we need. Have a read.

21

2 Comments

Next #databreach #KaiserPermanente 13.4M patients #HIPAA #PHI #EPHI #Security #Privacy #CyberSecurity #InfoSec #CyberSec #Risk #Patientrisk #PatientData https://lnkd.in/gSJKmKci

13

The Advanced Research Projects Agency for Health (ARPA-H), a Department of Health and Human Services (HHS) agency, announced in a news release on May 20 the launch of the Universal PatchinG and Remediation for Autonomous DEfence (UPGRADE) program. This effort will invest over $50 million in tool creation for cybersecurity in healthcare systems. According to the press release, UPGRADE will “enable proactive evaluation of potential vulnerabilities by probing models of digital hospital environments for weaknesses in software.” Once a threat is identified, a patch can be tested and implemented with minimum interruption. https://lnkd.in/gd9Y-gYD

9

3 Comments

Marketing & e-commerce best practices need to evolve. If you have to trick people or withhold information to convert a sale, that should tell you something about the true value of what you're selling.

5

Brawl leading to the use of firearms breaks out in Chelyabinsk. At least some of the participants are former members of Wagner. Another example of post-Wagner recidivism: A man is detained in Krasnoyarsk Kray on suspicion of murder. The suspect was previously sentenced to 18 years for involvement in organised crime, plus another couple for harrassing a local journalist, before being released to fight with Wagner in Ukraine. If you’re interested in analysis and resources on PMCs, sign up to my free newsletter, where I show how publicly available information can be transformed into open-source intelligence (OSINT) to develop a deeper understanding of Russian and Eurasian security issues. Link in the comments, along with a link to the news report. #PMC #Russia #Wagner

1

1 Comment

Great news from NIST as they adapt digital identity guidelines for state and local benefits programs. This collaboration with the Digital Benefits Network and the Center for Democracy and Technology to refine digital identity measures is a step in the right direction. It's essential to ensure that as we enhance digital services, we also safeguard privacy and equity, particularly in public benefits administration. Looking forward to seeing how these guidelines will foster more secure and inclusive digital environments. https://bit.ly/3KYuH5J

22

Harnessing The Collective Defense with Intelligence Sharing and Continuous Threat Exposure Management https://lnkd.in/gPtXz-Ay

2

We asked some channel leaders and industry experts to weigh in on what MSPs should take away from v2 of the National Cybersecurity Strategy Implementation Plan released last week. They break out what you need to know here. Many thanks to Mike Semel Tim Golden Lawrence Cruciana and Kevin Beaver #cybersecurity #msps

8

4 Comments

In a recent Senate hearing, U.S. lawmakers expressed concerns about who is responsible for reporting foreign election interference. Amidst debates, Director of National Intelligence Avril Haines outlined the current process, which involves various agencies depending on the situation, but highlighted the challenges posed by political sensitivities. The discussion reflects the broader national security context where the U.S. is becoming more proactive about publicly disclosing such interference, a shift prompted by past experiences and ongoing geopolitical dynamics. For a full discussion on the challenges and strategies of reporting foreign election interference, read the detailed article on CyberScoop: https://lnkd.in/ewVhnUsq #ElectionSecurity #CyberSecurity #USPolitics #NationalSecurity

7