
Cybersecurity and Government Contractors: Key Considerations
With the False Claims Act (FCA) in mind, MSSPs & government contractors should review data privacy & cybersecurity requirements in their customer contracts.

Ransomware Attacks: Why Case Studies Provide Rare Learning Opportunities
A ransomware research report from the United States Senate Committee on Homeland Security & Governmental Affairs offers seven recommendations.

Utah Privacy Legislation: What MSPs and MSSPs Need to Know
The Utah Consumer Privacy Act (UCPA) appears similar to Virginia’s Consumer Data Privacy Act (VCDPA). Here are the potential data privacy implications for service providers.

Ransomware and Commercial Airline Hijackings: Disturbing Similarities
The sharp uptick in ransomware attacks echoes a similar hijack trend in the commercial airline industry decades ago. Are there lessons to be learned?

OFAC Ransomware Guidance: Prepare, Report, and (Preferably) Don’t Pay the Ransom!
New ransomware guidance from the U.S. Treasury Department’s Office of Foreign Asset Control (OFAC): What it all means.

SEC Seeks to Enforce Safeguards Rule Amid Email Cyberattacks
Multi-factor authentication (MFA) could have protected these financial services firms from email account takeovers, SEC investigation says.

New York City Enacts Biometric Privacy Law
New York City law restricts the collection and/or use of biometric technology by certain businesses, Patterson Belknap Webb & Tyler explains.

Capital One to Pay $80 Million Fine for 2019 Data Security Hack
Capital One agrees to pay $80 million fine to resolve claims related to data breach that affected 100 million accounts in the U.S. — one of the largest financial data breaches ever.

DFS’s Cybersecurity Regulation: What Your Company Should Have Done
Organizations covered by New York’s Cybersecurity Regulation for Financial Service Companies must take stock of their compliance efforts before pushing deeper into 2019.

Cyber Lessons From The SEC?
Memo to public companies: Pay attention to a recent U.S. Securities and Exchanges Commission crackdown on the use of automated technology to detect investment advisor fraud.