The Washington My Health My Data Act (WHMDA) is a new law that aims to protect the privacy and security of personal health information in Washington State. The law applies to any entity that collects, uses, or discloses personal health
Assured SPC
The Washington MHMD law could have a big impact on your organization
There are many health data privacy and protection laws in the US. Most people know HIPAA protects their privacy and requires protection of their personal health information. But it only affects specific business that are classified as covered entities (doctors,…
Worried about AI / ML?
This is a scary moment for AI / ML
This is a scary moment for artificial intelligence / machine learning (AI / ML). We are at a point where developers are implementing AI / ML wherever there it has potential…
CIS Controls 8.0 Webinar
Announcing SecureTheVillage Webinar on CIS Controls 8.0
Barry Weber, a partner in Assured SPC will be joining Stan Stahl, a legendary cybersecurity evangelist in a lively discussion of the 18 controls in v8, including the Asset Type, Security Function, and…
Agile Cybersecurity
Incremental or Agile Cybersecurity
Description: Organizations struggle with many cybersecurity issues. These issues include managing information security risk, changing threats and the cost of safeguards. An effective solution is to approach cybersecurity as a step-by-step journey. Barry Weber, vCISO and…
Finally, a test for “reasonable” security
Overview
Many privacy laws require that organizations implement “reasonable security”. There have been many definitions of reasonable security. The Sedona Conference issued a final commentary on reasonable security for personal information on February 17, 2021. This definition is likely to…
Webinar: Cybersecurity (Without Boiling the Ocean)
Announcing a Secure The Village Webinar on Cybersecurity (without boiling the ocean)
Date and Time: March 11, 2021 (10-11am PT)
Description: Organizations struggle with many cybersecurity issues demanding attention, time and money. These issues include managing information security risk, the ever-changing…
How to avoid or minimize the cost of privacy compliance
Minimizing privacy requirements is good for business
At Assured SPC, we help businesses satisfy regulatory and third-party requirements for information security and consumer/resident privacy. Whenever possible, we provide guidance on how to avoid and minimize cost and impact of privacy…
Solarwinds Orion Supply Chain Attack
Learnings from the Solarwinds Orion cybersecurity attack
Some details on the Solarwinds attack are coming out. Full details on the attack may not be fully understood for months. But we know it has been significant. I participated in an insightful…
Top 5 CCPA Privacy Do’s (and Don’ts)
Top 5 CCPA Privacy Do’s (and Don’ts)
There is a lot of talk about legal privacy requirements, the steps to implement a privacy program and technology that can assist. Here is a list of what we consider the Top 5…