Notably, the Proposed Rule adds two new FAR clauses that will be required in all solicitations and contracts: (1) FAR 52.239-ZZ, Incident and Threat Reporting and Incident Response Requirements for ...

Security teams must update their security incident reporting policies and processes to account for remote work or risk exposure to increased threats. The ability for employees to work remotely comes ...

The Cyberspace Administration of China (“CAC“) has recently published the Administrative Measures for Network Security Incident Reporting (“Measures“), which provide further guidance on when and how ...

Let’s start by defining the “professional security incident report” as “a document created by an investigative process that captures the scene of a security incident; that serves as a company or ...

LastPass attacks began with a hacked employee's home computer. The investigation now reveals the password manager company's data vault was compromised. Image: Tada Images/Adobe Stock LastPass was ...

Increasingly complex business partnerships and rising reliance on third-party software components are proving to be ever weakening cybersecurity links. Many enterprises are at growing risk due to ...

The Transportation Security Administration (TSA) has made progress on establishing a systematic process for regularly conducting trend analysis of the rail security incident data it receives and is ...