Here’s a cartoon I created to illustrate the importance of security awareness training. I hope you find it amusing.
Passwords Cartoon – Security Awareness Training
- SHARE:
-
-
-
-
“Privacy”: A Unique Play Starring Your Smart Phone
I was fortunate to see James Graham’s incisive play “Privacy” this past Sunday at the Public Theater in New York City. The play is a witty and immensely engaging examination of all the data being collected about us and being assembled into digital dossiers. Technology is adeptly woven into the play. At many points during the production, audience members are asked to use their smart phones. The script is entertaining and intelligent. There is never a dull moment, and I was laughing throughout. Continue Reading
- SHARE:
-
-
-
-
Microsoft Just Won a Big Victory Against Government Surveillance — Why It Matters
Yesterday, Microsoft won a huge case against government surveillance, a case with very important implications: In the Matter of a Warrant to Search a Certain E‐Mail Account Controlled and Maintained by Microsoft Corporation.
- SHARE:
-
-
-
-
HIPAA’s Long Arm — and Why It’s a Good Thing
Recently, the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR) issued its first HIPAA resolution agreement and monetary penalty against a business associate (BA).
- SHARE:
-
-
-
-
Ransomware Growing Out of Control
Security experts are sounding the alarm bell as ransomware attacks continue to increase rapidly since my last post on the subject.
- SHARE:
-
-
-
-
Attorney Confidentiality, Cybersecurity, and the Cloud
There is a significant degree of confusion and lack of awareness about attorney confidentiality and cybersecurity obligations. This issue is especially acute when it comes to using the cloud to store privileged documents. A common myth is that storing privileged documents in the cloud is a breach of attorney-client confidentiality. In other instances, many attorneys and firms are not paying sufficient attention to their obligation to protect the confidentiality and security of the client data they maintain.
- SHARE:
-
-
-
-
6 Great TV Series About Privacy and Security
In previous posts, I have listed some of my favorite novels and movies about privacy and security issues. I don’t want to leave out TV, as there are some great TV series too.
- SHARE:
-
-
-
-
New Resource Page: How to Make Security Training Effective
I recently created a new resource page — How to Make Security Training Effective. The page contains my advice for how to make security training memorable and effective in changing behavior.
Training the workforce is an essential way to protect data security, but not all training endeavors are successful. Poor training is akin to shouting into the void. This resource page is designed to provide some tips and advice about training that I’ve learned from being an educator for more than 15 years. Continue Reading
- SHARE:
-
-
-
-
New Resource Page: Security Awareness Training FAQ
What laws require security awareness training? What topics do the laws require to be covered? What should be covered? How frequently should training be given?
I recently created a new resource page — Security Awareness Training FAQ — to answer the above questions and more. I discuss various legal and industry requirements for security awareness training. I also discuss best practices. I hope that you find this resource to be useful.
- SHARE:
-
-
-
-
When Is a Person Harmed by a Privacy Violation? Thoughts on Spokeo v. Robins
When is a person harmed by a privacy violation?
The U.S. Supreme Court just handed down a decision in an important case, Spokeo Inc. v. Robins.
Plaintiff Thomas Robins sued Spokeo under the Fair Credit Reporting Act (FCRA) because Spokeo had inaccurate information about him in its profile. Spokeo’s profiles are used by potential employers and others to search for data about people. FCRA requires that information in profiles for these purposes be accurate, and it allows people to sue if information is not.
- SHARE:
-
-
-
-
