Bryan Knauss

It is always a pleasure to answer Chris Daly's insightful questions about #cyberriskmanagement.

6

1 Comment

#CDK Files Notice of #Breach in Maine An interesting filing from CDK's outside counsel appeared over the weekend on the Maine AG's website. Maine, like many other states, requires notification of the state attorney general if a #breach occurs that affects Maine residents. This filing with the Maine AG states that an "external system breach (hacking)" event occurred at CDK on June 14, 2024, that was discovered on June 19, 2024, and that CDK has offered credit monitoring to affected individuals. The details are scarce, and this filing describes a very limited impact (affecting only one Maine resident, and 36 individuals in total), but it appears to be the first public acknowledgement of which we are aware from CDK that personally identifiable #data was #breached in June 2024. According to the CDK notice letter - https://lnkd.in/e2ffyWzf - the data involved included "Name, business or personal address, and business tax identification number or social security number." Exactly what this means is unclear.  The dates listed align with the CDK data breach incident in June 2024, but it is not clear how this apparently very limited breach event is linked to that broader event (if at all), why this was issued now*, what data was involved, whether there is any impact on any dealer data, or whether this is the first or last of such notices to be filed. *The notice letter is dated September 20, 2024, the date it appears to have been reported to the Maine AG was September 23, 2024, but was just posted on the Maine AG site over the weekend.

5

🚨 CMMC DIBCAC Assessment 🚨 Check out the podcast to learn more and what to expect. Communication, communication, communication is key. Fail to plan, plan to fail as they say Stay compliant, Ignyte

7

1 Comment

protip: if you don't know if your company qualifies as a "data broker" in California, a quick check in with your lawyer is cheaper than the $200/day fine for not registering. (If this LinkedIn post saved you $ by reminding you to register, you can thank me by giving me a Right to Delete)

7

1 Comment

Register for our upcoming webinar, Deep Dive Into TLOxp® for Licensed Investigators, to learn useful tips and tricks to uncover robust information and data needed to help you successfully close cases. Don’t miss this informative session. Register today: https://gag.gl/Fnhsls #Investigators #LicensedInvestigators #Webinar

3

It is crucial for all business leaders to thoroughly review and address technical debt, regardless of whether their organization follows a specific framework. This is particularly important if the organization is advancing with FedRAMP.

2

Great blog post how Threat Intelligence can enhance your Fraudstrategy. #Threatintelligente #fraud #Mobilemalware

4

Hope you can join us for a robust discussion on an important topic!

9

Cybersecurity Awareness Month isn’t just about products—it’s about perspective. It’s easy to get caught up in the hype about new tools, but this October, we encourage you to focus on what will ensure your cybersecurity is truly resilient. Here’s why - https://bit.ly/3NsCtpJ

6

Pennsylvania’s Consumer Data Privacy Act is Now Law! As of March 18, 2024, Pennsylvania has officially passed the Consumer Data Privacy Act (House Bill No. 1201, Session of 2023). This landmark legislation enhances consumers' data privacy rights and sets forth clear obligations for data controllers and processors. Key Highlights Consumer Rights: Consumers now have enhanced rights, including the ability to access, correct, and delete their personal data. They can also opt out of data processing for targeted advertising or sales. Business Responsibilities: Data controllers must limit data collection, obtain consent for processing sensitive data, and implement robust data protection measures. Enforcement and Penalties: Strict penalties are in place for non-compliance, emphasizing the importance of businesses aligning with these new standards Is your business fully compliant with these regulations? Privacy24 is here to help! Our seasoned compliance experts specialize in helping businesses navigate complex data privacy laws. Our expert team can ensure that your company not only complies with this new law but also leverages compliance as a competitive advantage. Our Services Include: Comprehensive compliance audits. Tailored policy development and strategic implementation. Training and ongoing support to maintain high compliance standards. Don’t risk penalties or damage to your reputation. Contact us today for a consultation and let Privacy24 help you achieve and maintain compliance with confidence. 🌐 For more information, visit privacy24.io or send us a direct message here on LinkedIn! #DataPrivacy #ConsumerProtection #PennsylvaniaLaw #ComplianceExperts #Privacy24

6

🎯 SteelEye’s Integrated Surveillance solution allows firms to focus on what matters most.  By combining structured and unstructured data across channels into one integrated platform, our solution provides smarter risk detection and fewer false positives in one seamless system. ➡️ Ready to enhance your compliance strategy? Explore more here: https://lnkd.in/gxGQ5J3E #IntegratedSurveillance #FinTech #RegTech #SteelEye #Compliance #ComplianceSolutions  

6

LexisNexis® Risk Solutions Announces Definitive Agreement to Acquire IDVerse™ - We are expanding and evolving our leading capabilities in risk, compliance and fraud solutions to enhance digital identity onboarding and global identity verification. Read the press release: bit.ly/49y7zq9

22

1 Comment

Proactive policies can help prevent Elder Financial Exploitation (EFA) from happening at financial institution, as can comprehensive #frauddetection software. By staying alert to the elder fraud red flags, financial institutions can play a crucial role in identifying and preventing elder financial exploitation.

16

1 Comment

Please join #SilverSky in a webinar sponsored by CUNA Strategic Services as Tom Neclerio, SilverSky’s CISO, reviews the benefits of using Continuous Validation Testing to improve your Credit Union’s cybersecurity posture. Tom will cover how this improved testing works and how it better protects against new and known vulnerabilities and they key fact that we want to find them as early as possible. https://lnkd.in/evrgXCwQ #CyberSecurity #CreditUnions

4

📈 Will Smaller Companies Buckle Under the SEC's New Requirements? The latest article from Dark Reading discusses the challenges smaller companies may face under the SEC's new cybersecurity requirements. As regulations become stricter, smaller firms might struggle to comply, potentially impacting their operations and security posture. At Loopli, we understand the complexities of regulatory compliance and offer tailored solutions to help businesses of all sizes meet these challenges effectively. Read the full article here: Will Smaller Companies Buckle Under the SEC's New Requirements? https://lnkd.in/erTBgZTY #CyberSecurity #SEC #Compliance #InfoSec #Loopli

2

What is the best way to fund IT needs across various agencies and departments? To improve outcomes, start with a baseline and allocate the resources to the areas of highest risk likelihood and impact. Tools alone are never the answer. You can put the best paintbrush in my hand, but that doesn't make me an artist. The same is true with SIEM, a pen testing tool, or a compliance portal provided to an organization without experience or training to detect and validate threats or how to implement controls to achieve data protection requirements. The shortcut is often to wrap a service around the tool that empowers the organization to learn how to effectively leverage the solution to get to the outcome: https://lnkd.in/eKX2_AAr

2

My favourite panel at this year’s The SPARK Institute, Inc. forum. Some key takeaways on fraud detection and prevention in the US retirement industry: 👉 There is more data on plan participants than ever that is easily accessible thanks to previous data breaches and people oversharing on social media, more people than ever willing to commit fraud, and bigger stakes means scammers and cyber criminals going after US retirement accounts. 👉 According to Fraudshare, there has been a 150% increase in account takeover incidents in 2024 compared to 2023. 👉 On average, a fraudulent withdrawal is over $100,000. 👉 There is a growing share of domestic fraud when fraudsters sound like average Americans; combine it with the growing use of GenAI to create deepfakes, and we have a huge problem to solve. 👉 But it’s not all doom and gloom. There are some effective remedies such as using passkeys and MFA, educating plan sponsors and participants, dark web monitoring, information sharing among industry players, and encouraging “see something, tell something”. Russell Anderson, CFE Melanie Bergen Brendan Purcell, CFE Pat Kinsel

17

1 Comment

Continued changes in compliance requirements in the #firearms industry. Be sure to join our webinar on how #FFL companies can mitigate risk. https://lnkd.in/e88e7UGB

14

1 Comment