Eversheds Sutherland Cybersecurity and Privacy Insights Blog
content top

Will NIST’s Framework be Naughty or Nice?

In early 2014, the National Institute of Standards of Technology (NIST) released its Framework for Improving Critical Infrastructure Cybersecurity (referred to by those in the know as the NIST Framework), which is intended to “enable organizations—regardless of size, degree of cybersecurity risk, or cybersecurity sophistication—to apply the principles and best practices of risk...

Not All Firms May Be Ready to Tell Cyberattackers to “Go Ahead Make My Day”

Two reports on cybersecurity compliance issued during 2014, a preliminary unofficial report of findings from the SEC’s cybersecurity sweep and the North American Securities Administrators Association (“NASAA”) report on the findings of its cybersecurity survey of state-registered “small and mid-sized” investment advisors contain excellent insight into how firms are protecting...