Topic of the Week

Last week, we discussed the Sensitive Data Rule and what this rule means, who it affects, and what your organization should be doing right now to prepare. One important thing to note from that discussion is the relevance of the CISA Security Controls to the Sensitive Data Rule. In the Sensitive Data Rule there are two types of data transactions that are defined, prohibited transactions and restricted transactions.

As the U.S. doubles down on protecting sensitive personal and government-related data from falling into the hands of the wrong people, a new privacy regulation is on the horizon. The Department of Justice’s Sensitive Data Rule officially takes effect July 8, 2025, and this current “grace period” gives you the chance to prepare. This week we are digging into what this rule means, who it affects, and what your organization should be doing right now to prepare.

A couple of weeks ago, we talked about the massive data breach that exposed millions of logins. When I told my partner about it, and recommended he go change his passwords, he asked why, since, more than likely, his information was already out there, and it got me thinking. Usually, we are just told to change our passwords, but nobody really explains why.

Keeping our information private in the digital age remains one of the internet’s greatest challenges, and a newly uncovered breach gives us yet another disturbing reminder.

We have all heard about data breaches and understand that they are quite damaging, but do we understand how damaging they are?

Just a few weeks ago, we discussed the growing challenge job seekers face in determining whether a job posting is even legitimate. But the script has flipped… Now employers are the ones asking if the candidates they're meeting are even real. Welcome to the unsettling new trend of deepfake job applicants.