Cyber Defense Magazine Global Edition for 2019

What are the penalties under the
new California Consumer Privacy
Act?
Companies that do not comply with the CCPA
are subject to both civil class action lawsuits in
the state of California with damages of $100 to
$750 per California resident and incident, or
actual damages, whichever is greater.
Companies are
Also subject to fines from the state as they can
be prosecuted by the California Attorney
General.
How does Bring Your Own Device
(BYOD) hinder any cyber security
plan?
The tremendous portability, and exceptional
ease of USB drives have proven to increase
productivity to millions of businesses and
government agencies. However, since most of
these drives are unencrypted, they can pose a
major security risk to the user storing anything
more valuable than public data.
Cyber security experts say that the use of an
encrypted USB flash drive is the best solution for
keeping confidential information what it was
intended to be – confidential.
From a cost perspective, hardware-based
encrypted USBs are not much more expensive
than non-encrypted devices – and they are like
insurance against the unthinkable – the loss and
breach of private data that could be exposed
otherwise. When you consider the costs and
consequences of a data breach, losing a drive,
etc., against the low purchase price of a nonencrypted
drive, the cost of an encrypted drive is
the most cost-efficient way to manage threats
and reduce risks.
With various regulations such as HIPPA, CCPA
and GDPR among others, the use of encrypted
USB drives can also provide legal protection to
many industries and professions. The minimal
investment for encrypted USB drives will cost
exponentially less than risking a potential data
breach, exposure, damage to your reputation
and enormous possible fines.
Their extreme portability means they are very
susceptible to being lost, accessed, or
misappropriated. When that happens, there is a
fairly good chance that data stored on the device
will end up in the wrong hands, risking the users
or company’s privacy and security.
Having a company policy of standardizing on the
use of hardware-based encrypted USB drives is
a key factor in a USB drive’s ability to provide the
safest, most trustworthy means to store and
transfer personal, classified, sensitive data.
Is hardware and software
encryption preferable?
Not only is encryption vital in USB drives
securing and protecting data, how that
encryption is performed is likewise important.
Users have two choices: hardware and softwarebased
encryption.
USB drive encryption can be done either through
the device’s hardware or software. A hardwarecentric
/ software-free encryption approach to
15