Geraldine Young (US)

Subscribe to all posts by Geraldine Young (US)

Cybersecurity Efforts Turn Focus to Financial Institutions, Technology Service Providers and “Cyber Resilience”

By Geraldine Young (US) on February 17, 2015 Posted in Vendor management and transactions

Financial institutions around the country recently received cybersecurity guidance in the form of a new appendix to the Federal Financial Institutions Examination Council’s (“FFIEC’s”) Business Continuity Planning Booklet, which is part of its Information Technology Examination Handbook. In the guidance, the FFIEC places the onus on financial institutions, their boards of directors, and senior management … Continue reading

Just what the doctor ordered: President outlines national breach law proposal

By Geraldine Young (US) on January 20, 2015 Posted in Compliance and risk management, Data breach, Regulatory response

Leading up to the President’s State of the Union, the White House previewed several potentially sweeping cybersecurity initiatives—including a proposed federal law that would create a single national breach notification standard, entitled the Personal Data Notification & Protection Act (the “Act”). The President argued that the proposed law will benefit consumers and alleviate the confusion … Continue reading