Publisher's Synopsis
THIS IS THE MOST COMPREHENSIVE GUIDE ON IMPLEMENTING SECURITY & PRIVACY FOR The MASSACHUSETTS DATA BREACH NOTIFICATION LAW (MA-DBNL).*** SPECIAL BONUS OFFER. FREE ACCESS TO the State of Massachusetts' Written Information Security Program (WISP) Template--with guidance and suggestions in creating an effective WISP submission*** SPECIAL CODE INCLUDE IN WISP SECTION *** Although several states have enacted legislation that mandates the protection of personal information, the MA-DBNL is considered the most complete and relatively burdensome enacted by a state to-date. It is for this reason; this book was crafted to provide a 21st Century roadmap to addressing Massachusetts' effort to better protect residents and businesses of the State.The MA-DBNL describes the elements that each business's information security program should contain, and further requires where technically feasible, the encryption of personal information stored on portable devices and personal information transmitted across public networks or wirelessly. The minimum standards for data security standards for Massachusetts-based companies and companies are modeled after the National Institute of Standards and Technology's (NIST) Special Publication 800-171, Protecting Unclassified Information in Nonfederal Information Systems and Organizations. It requires 110 security controls and is a current contract standard within the Department of Defense (DOD). This book is the current premier guide for NIST 800-171 and affords a how-to approach for company leadership as well as its respective Information Technology (IT) staffs. Written internationally acclaimed cybersecurity author, Mark Russo. He holds both a Certified Information Systems Security Professional (CISSP) certification and a CISSP in information security architecture (ISSAP). He holds a 2017 certification as a Chief Information Security Officer (CISO) from the National Defense University, Washington, DC. He retired from the US Army Reserves in 2012 as the Senior Intelligence Officer.He is the former CISO at the Department of Education. During his tenure, he led an aggressive effort to close over 95% of the outstanding US Congressional and Inspector General cybersecurity shortfall weaknesses spanning as far back as five years. He regularly speaks within the federal government and Intelligence Community on advanced topics regarding the evolution of cybersecurity in the 21st Century.
