Searching for the Meaning of Reasonable Security
After your organization has a data breach, what would you say to a judge that asked if your safeguards were ‘reasonable?’ (more…)
Category Archives: Governance & Risk Management
COMPLIANCE WEEK Webinar: The Questions a Judge Will Ask You After a Data Breach – What is Reasonable Security?
What is Reasonable Security? If you are breached and your case goes to litigation, you will likely be asked to demonstrate “due care” and that your controls were “reasonable.” Many are surprised to learn that a breach by itself does not constitute negligence in most cases. But judges will ask a set of questions that help them determine whether your controls were reasonable. (more…)
Cybersecurity Regulations: What the NYCRR 500 Deadline of March 1, 2019 Means to You
New York City is often referred to as the financial capital of the world; with the state of cybersecurity today and the increasing barrage of threats that financial related institutions must combat on a daily basis, it is no wonder that New York became the first state to take government action to do something about it. (more…)
Author! Author! Happy Hour at RSA
Highlight your RSA Experience at the Author! Author! Happy Hour.
(more…)
Ready for March 1, 2019? 23 NYCRR 500 SECTION 11
THE NEW YORK STATE DEPARTMENT of FINANCIAL SERVICES (DFS) CYBERSECURITY REGULATION 23 NYCRR 500 SECTION 11
(more…)
Defining Reasonable Security
Chicago Tribune – HALOCK Security Labs is conducting an informative webinar to help establish ‘reasonable‘ security in cybersecurity controls, based on the Duty of Care Risk Analysis (DoCRA) standard. This event is hosted by Compliance Week at 2:00 p.m. EDT on Thursday, March 21, 2019.
Do you know “reasonable” for your organization?
HALOCK is headquartered in Schaumburg, IL, in the Chicago area and advises clients on information security throughout the US.
What are my legal obligations when it comes to cybersecurity?
Cybersecurity is a major concern for all organizations today that utilize digital technology, but one of the initial questions for any organization must be, “What are my legal obligations when it comes to cybersecurity?” (more…)
