New State Law Mandates Cybersecurity Enhancements

By Peter F. Johnson, Superior Court of Pennsylvania   California Governor Jerry Brown signed legislation mandating a longtime cybersecurity best practice—changing default passwords.  The use of weak default passwords is endemic to the consumer devices world, but is just as common in the world of enterprise computer equipment, on which corporate and customer data may
Read More »

Five Questions (And Possible Good Answers) Boards of Directors Should Ask About Cybersecurity

By Joshua Mooney and Kate Woods, White and Williams LLP   Data privacy and security can feel overwhelming for a company’s executive management. Unfortunately, that overwhelming feeling can prevent constructive dialogue and action toward improving a company’s cybersecurity program. Recently, the U.K.’s National Cyber Security Centre (NCSC) issued what it called a “Board tookit” —
Read More »

Does the Fifth Circuit’s Decision in Spec’s Suggest a Breach for Cyber Coverage Into Other Insurance?

By Joshua Mooney and Andrew Lipton, White and Williams LLP   Despite the existence of cybersecurity insurance, companies still seek coverage for cyber liability under various types of other insurance. Carriers, in turn, rely upon broad exclusions to limit coverage for risks never intended to be insured. One such broad exclusion is for contractual liability. However,
Read More »