Computer Security Incident News Today

CFPB Announces Intention to Expand Enforcement Against Unfair Discrimination - The CFPB has published an updated examination manual for evaluating unfair, deceptive, and a...

On February 9, 2022, the SEC published a release addressing Cybersecurity Risk Management for Investment Advisers, Registered Investment Companies, and Business Development Companies ("Release").

Following the SolarWinds and the Colonial Pipeline cyberattacks, the Biden Administration emphasized a shift toward mandatory cybersecurity requirements.

Data Aggregators Launch Open Finance Data Security Standard - A group of data aggregator fintechs and security and compliance companies recently released a new data...

Federal banking regulators issued a final rule that impacts how banks and other regulated entities report certain data incidents. Those subject to these new reporting requirements include U.S. banks and bank service providers.

The FDIC, the FRB, and the OCC issued a joint final rule establishing computer-security notification requirements for banking organizations and bank service providers. The Final Rule applies to FDIC, FRB, and OCC regulated banking organizations and bank service providers.

1. Introductory remarks The Directive on Security of Network and Information Systems 1 was adopted by the European Parliament on 6 July 2016 and entered into force in August 2016. It was the first piece of EU-wide cybersecurity legislation. Member States had to transpose the NIS Directive into their national legislation by 9 May 2018 and identify operators of essential services ( OES) by 9 November 2018. Under the NIS Directive, Member States are required to ensure that OES and digital ...

To embed, copy and paste the code into your website or blog: On December 17, 2020, the Office of the Comptroller of the Currency, Treasury (OCC); the Federal Reserve; and the Federal Deposit Insurance Corporation (FDIC) issued a Notice of Proposed Rulemaking that would require financial institutions to notify their primary federal financial regulator, within 36 hours of becoming aware, that a “computer-security incident” or “notification incident” has occurred. The rule would also requi...