Building A Reasonable Cyber Defense Program
HelpNet Security, Tuesday, April 1st, 2025
If you do business in the United States, especially across state lines, you probably know how difficult it is to comply with U.S. state data privacy laws.
The federal government and many U.S. state governments require you to implement 'reasonable' cybersecurity controls around how you handle data breach notification and the data privacy of your customers. But these mandates don't discuss how you can meet the standard of reasonableness in your cybersecurity efforts. More specifically, they don't identify frameworks to which you can align your controls implementation program.