On August 2, 2018, pharmaceutical giant Merck filed a civil suit in Union County, New Jersey, state court for declaratory relief and breach of contract against fifteen insurers, and through its wholly owned subsidiary, International Indemnity, against seven reinsurers, for damages resulting from the June 27, 2017, 'NotPetya' cyberattack. Read More
This article is part of the Action Cyber Times™ Series on Agreements for Information Technology and Transactions. The SaaS (Software as a Service) is a services agreement, not a software license, by third-party vendors to provide their particular proprietary software functionality from a remote server to a client via a data connection. As with most commercial agreements, one size does not fit all, and they may be tailored to the specific needs of the client. However, if the vendor requires installing... Read More
Metrics not Mahem This is the first of a two part ACT series on Cybersecurity Metrics that may be utilized by the organization in their day-to-day program. It will be followed by best practices for 'the other half'', “5 Metrics the Board Needs to Read”. The Chief Information Security Officer (CISO) faces a plethora of tasks and objectives to secure valuable and proprietary data frequently dispersed among numerous software and hardware resources. The CISO’s central (unwritten) skill requirement is, ‘problem solver... Read More
This article is part of an Action Cyber Times™ series on Cybersecurity Risk Management. The series reviews relevant issues regarding cybersecurity compliance and enforcement. SEC Statement and Guidance on Public Company Cybersecurity Disclosures Rules and Regulations in the SEC arsenal. See SEC Release Nos. 33-10459 and 34-82746, published at 83 Federal Register 38 pp 8166-8172 (Feb 26 2018) re 17 CFR Parts 229 and 249. See also the prior ACT post titled, SEC 2018-2019 - ICOs and Cybersecurity, for a brief review of... Read More
