Publications
Compliance in a Time of Crisis
April 30, 2020
The COVID-19 pandemic has companies facing unprecedented financial and operational challenges. Many may consider shifting stretched resources and attention away from key units, including compliance. However, past crises illustrate the importance of maintaining an ethical culture and focusing on heightened areas of risk, because regulators seeking to protect the market, consumers and businesses from misconduct will expect more — not less — from companies in crisis.
Protecting Lives Without Destroying Jobs — Using Technology To Suppress COVID-19
April 10, 2020
Many countries around the world are being forced to watch as the only tool they have to suppress COVID-19 — social distancing — causes unprecedented damage to their economies. The UK and other countries are developing less economically damaging techniques, chiefly systems of testing and contact tracing, similar to those deployed in South Korea, Singapore and China. In this article, we discuss this technology and consider the data protection and cybersecurity concerns it may raise.
CISA Updates Guidance for Essential Critical Infrastructure Workforce
April 2, 2020
On March 28, 2020, the U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) issued updated guidance for identifying the “Essential Critical Infrastructure Workforce,” which state and local governments may use in making decisions about how best to address the COVID-19 pandemic. The update incorporates significant input from other federal agencies, state and local governments, industry groups and the private sector to address particular COVID-19 needs and synchronize guidance with state priorities.
Cybersecurity Challenges and Incident Response Preparedness During the Coronavirus Pandemic
March 25, 2020
As companies transition to a remote workforce in response to the coronavirus pandemic, they are exposed to new cyber vulnerabilities that cyber attackers are poised to exploit, including increased network access points, reliance on unsecured Wi-Fi networks, and use of unpatched virtual private networks and devices. Many companies have taken steps to secure these vulnerabilities, but companies also need to reassess their incident response plans and adapt them to the current environment.