Access "The ongoing debate over a federal breach notification law"
This article is part of the December 2011 issue of An insider look at the Windows Vista security review
Here we go again. Every year it seems there’s at least one federal bill to create a national data breach notification standard. This year, there’s at least five in the mix. The renewed push by lawmakers isn’t surprising given the raft of high-profile security breaches this year involving Sony, Epsilon and others. But whether any of their bills actually become law is a huge question mark. These proposals always fade away, hammered down by partisan wrangling that pits business interests against consumer interests. Movement towards a federal breach notification law started fairly soon after California enacted its groundbreaking security breach disclosure law, known as SB1386, in 2002. Since then, 46 states have passed some form of breach notification requirement, creating a maze of laws that companies must navigate in the event of a breach. A national law would supersede the patchwork of state laws. This fall, the Senate Judiciary Committee approved three bills that would create a national data breach notification standard. The Data Breach Notification Act ... Access >>>
Premium Content for Free.
SEC guidance clarifies cybersecurity disclosure requirements
by Marcia Savage
Companies need to factor security risks and incidents in their financial disclosures, agency says.
Enterprise digital rights management best practices
by Rich Mogull
EDRM brings users into security more than any other tool. Are you ready?
- SEC guidance clarifies cybersecurity disclosure requirements by Marcia Savage
Alternatives to passwords: Replacing the ubiquitous authenticator
by Ron Condon, UK Bureau Chief
As the relative security of passwords falters, are they destined for obscurity?
Chris Paget on Vista final software security review
by Chris Paget, Contributor
Researcher tells a firsthand account of her experience as a member of the final security review team for Windows Vista.
- Alternatives to passwords: Replacing the ubiquitous authenticator by Ron Condon, UK Bureau Chief
The ongoing debate over a federal breach notification law
by Marcia Savage
Lawmakers continue to wrangle over creation of a national data breach notification standard.
Good information security leaders must be good security recruiters
by Lee Kushner and Mike Murray
If you’re going to lure topnotch talent, refine your skills.
The need for cloud computing security standards
by Amy Larsen DeCarlo, Contributor
Cloud computing needs security standards and widely adopted security practices in order to become a viable choice for the enterprise.
- The ongoing debate over a federal breach notification law by Marcia Savage
More Premium Content Accessible For Free
Cloud and mobility in the enterprise has caused a heightened need for organizations to take a closer look at next generation authentication ...
Virtualization and cloud computing are part and parcel of enterprise networks today. Virtualization security, however, is still a bolt-on affair ...
Mobile device security is one of the biggest nightmares InfoSec pros face in the era of bring your own everything (BYOE). Simply banning employees ...