Despite the new instructions on breach notification in the HIPAA Omnibus Rule, there's still plenty of uncertainty about what constitutes a "compromise" of data that triggers notification, says privacy attorney Adam Greene.
State-sponsored attacks are up significantly, so organizations need to rely on new, stronger controls to ward off advanced threats. John Gordineer of Dell SonicWALL discusses the role of next-generation firewalls.
Misconfigured firewalls aren't necessarily a result of technical issues. Often, there are business or staff issues that can be easily addressed to improve security. Jerry Skurla of FireMon explains how.
Data breach notification legislation before Australia's parliament, if enacted, would add new dimensions to its privacy laws, perhaps influencing lawmakers elsewhere, privacy lawyer FranÃ§oise Gilbert says.
The information security industry needs to hit rock bottom, says Akamai's Joshua Corman. And then - to truly improve information risk management - it needs to develop a new, adversarial view of the world.