Content by Howard Anderson

Fraud Responsibility: Revamp the Rules?

Howard Anderson  •  November 13, 2013

One key provision of Article 4A of the Uniform Commercial Code, which deals with reasonable security measures for banks, needs to be dropped, contends attorney Dan Mitchell, who represented PATCO Construction in an account takeover dispute.

Avoiding Breach Investigation Mistakes

Howard Anderson  •  November 8, 2013

Organizations must guard against making three common mistakes when conducting an investigation of a data breach or fraud incident, says attorney Kim Peretti, a former Department of Justice cybercrime prosecutor.

Reasonable Security: Changing the Rules

Howard Anderson  •  October 28, 2013

Article 4A of the Uniform Commercial Code, which deals with reasonable security measures for banks, needs a major update, says attorney Dan Mitchell, who represented PATCO Construction in a high-profile account takeover dispute.

Building a 'Defensible' Breach Response

Howard Anderson  •  October 23, 2013

Organizations must develop a "defensible response" to data breaches and fraud incidents because of the likelihood of a regulatory investigation or legal action, says attorney Kim Peretti, a former Department of Justice cybercrime prosecutor.

Study: Cybercrime Costs Grow 26%

Howard Anderson  •  October 8, 2013

A new Ponemon Institute study shows the average annual cost of cybercrime for 60 major U.S. companies rose 26 percent this year. Find out some of the factors contributing to the rising cost.

Post-Breach Credit Monitoring Strategies

Howard Anderson  •  April 17, 2013

To retain their customers after a breach of sensitive information, organizations should take the extra step of calling those affected to offer free credit protection services, says security expert Brian Dean.

Assessing Whether to Report a Breach

Howard Anderson  •  March 4, 2013

Consumer advocate Deven McGraw describes how a new federal rule spells out four factors that must be weighed in a risk assessment to determine if a health data breach must be reported.

The Security Highlight of HIPAA Omnibus

Howard Anderson  •  March 1, 2013

The HIPAA Omnibus Rule stresses the need for business associates to adequately safeguard patient information. What are the implications? Here's what a federal privacy officer and a consumer advocate have to say.

HIPAA Omnibus: A Compliance Plan

Howard Anderson  •  February 27, 2013

How is the six-hospital Barnabas Health delivery system tackling the challenge of complying with the new HIPAA Omnibus rule? Hussein Syed, director of IT security, explains.

CISOs: Building Credibility

Howard Anderson  •  February 26, 2013

CISOs looking for a way to build credibility with senior executives - and win funding for important projects - need to drop the "just say no" approach and build a reputation as a team player, says security professor Ray Davidson.

NASA Encrypting Laptops After Breach

Howard Anderson  •  November 15, 2012

NASA is ramping up efforts to encrypt all laptops following the recent theft of one containing sensitive personal information. Find out more about the U.S. space agency's encryption plans.

An Entertaining Approach to Training

Howard Anderson  •  September 12, 2012

A federal agency is offering a free online training program that provides useful insights on protecting information privacy. Learn how this clever training "game" works.

Third-Party Breaches on the Rise

Howard Anderson  •  August 14, 2012

U.S. information breaches involving third-party business associates doubled in the first half of the year, says Karen Barney of the Identity Theft Resource Center. Find out the other results of the group's breach study.

Breached Organizations Are Tight-Lipped

Howard Anderson  •  July 17, 2012

Too many organizations that experience a data breach fail to reveal information on the cause of the incident so that consumers can take appropriate action, one consumer advocacy group contends.

A Tribute to Terrell Herzig

Howard Anderson  •  July 10, 2012

In a tribute, we remember Terrell Herzig, information security officer at UAB Health System, an innovator who was passionate about sharing best practices for protecting sensitive information.