Educause Security Discussion mailing list archives

Pre-Breach Requirements - 18 States


From: Clifford Collins <collinsc () FRANKLIN EDU>
Date: Wed, 6 Jul 2011 11:38:46 -0400

Hello Security Compatriots, 
I was searching the web for info on which states have laws require some kind of breach notification and encountered 
this document from the law firm Crowell & Moring LLP: 

http://www.crowell.com/pdf/securitybreachtable.pdf 

In the right-hand column is a yes/no section on required "pre-breach measures." There are 18 states listed as having 
them. Anybody aware of these requirements? Have you done something about it? If so, what have you done? It would be 
great to have a "template" to work from! 

Clifford A. Collins 
Information Security Officer 
Franklin University 
201 South Grant Avenue 
Columbus, Ohio 43215 
"Security is a process, not a product" 


Current thread: