Data Protection Directive for police and criminal justice sector.

What about the Data Protection Directive for the police and criminal justice sector?

NIST - Cybersecurity Self-Assessment Tool.

Known as the Baldrige Cybersecurity Excellence Builder, the self-assessment tool is based on the Baldrige Performance Excellence Program and the risk management mechanisms of NIST's cybersecurity framework.

The Baldrige Performance Excellence Program, like the cybersecurity framework, is designed to help organizations worldwide guide their operations, improve performance and achieve sustainable results. NIST, a Commerce Department unit, administers the Baldrige program. (link http://www.bankinfosecurity.com/aligning-cyber-framework-organizations-strategy-goals-a-9401)

N. Wiener, Cybernetics, or control and communication in the animal and the machine,

The MIT Press, Cambridge (MA), 1948; seconda edizione: Wiley, New York, 1961 (trad. italiana: La Cibernetica - Controllo e Comunicazione nell'animale e nella macchina, Il Saggiatore, Milano, 1968)

Key objectives of the EU Commission in the field of cybersecurity

Increasing cybersecurity capabilities and cooperation.

The aim is to bring cybersecurity capabilities at the same level of development in all the EU Member States and ensure that exchanges of information and cooperation are efficient, including at cross-border level. In this area, the Directive on security of network and information systems (the NIS Directive) is the main instrument supporting Europe's cyber resilience.

Court of Justice of the European Union - Luxembourg, 21 December 2016

Judgment in Joined Cases C-203/15 Tele2 Sverige AB v Post-och telestyrelsen and C-698/15 Secretary of State for the Home Department v Tom Watson and Others

SANS Institute InfoSec Reading Room - Security Assessment Guidelines for Financial Institutions

Financial institutions face challenges relative to preserving the safety and soundness of the institution and its ability to manage earnings and capital. New technologies require increased diligence by financial intuitions. (link)

Coming Soon .. Credit Scoring & Information Security (How to evaluate Information Security risks in determining the credit rating of an organization). Avv. Giuseppe Serafini Law Firm

Canada amends federal data protection law, PIPEDA

Canada’s Senate and House of Commons passed the Digital Privacy Act to amend the country’s federalPersonal Information Protection and Electronic Documents Act (PIPEDA)  - By Christine Carron (CA) - http://www.dataprotectionreport.com

New good practice guide by ENISA on disclosing vulnerabilities

ENISA publishes a good practice guide on Vulnerability Disclosure, aiming to provide a picture of the challenges the security researchers, the vendors and other involved stakeholders are confronted with when disclosing software/hardware vulnerabilities. The study gives a glimpse into the complex vulnerability disclosure landscape by taking stock of the current situation, identifying the challenges and good practices and proposes concrete recommendations for improvement.

The main part of the report, describes the main concepts behind vulnerability disclosure along with some figures of the number of vulnerabilities disclosed in the past 13 years.