Cyber Defense eMagazine February Edition for 2022

Quite often the perpetrator claims to be calling or emailing from a government agency with urgent need
to get information to maintain the target’s benefits or tax status; of course, Social Security and the Internal
Revenue Service are the agencies most often cloned by the criminals.
Also common is the hyperlink which appears to come from a legitimate source, often a company where
the target already has an account, but directed to a bogus website where the target’s username and
password are collected by the criminals; this information is then used to hijack the target’s real accounts.
Privacy
As identity theft threats have developed, an important aspect of the legal and regulatory response has
arisen out of privacy concerns and consumer rights. This response started with the adoption of privacy
laws by States and has become a focal point for federal action.
In addition to setting standards and requirements for holders of protected sensitive information, broader
provisions have been created, such as disclosure and notification standards and even private rights of
action. Under private rights of action, affected parties whose sensitive information has been
compromised due to failure on the part of the holders, can sue for damages directly rather than waiting
for government fines or punitive actions.
It’s easy to see how any failures in cybersecurity practices resulting in data breaches involving protect
personal information can trigger the provisions and penalties of privacy laws and regulations.
As a result, privacy initiatives have become a major driver with immediate effect on cyber practices. It’s
worth noting that even compliance with privacy laws may not provide a complete shield against liability
in the event of a breach.
In the view of the ICFE, in identity theft risk management, substantial coverage of privacy issues is a
necessity, especially as they affect vulnerable demographics, such as seniors, children, and veterans.
ICFE is pleased to report that this emphasis on privacy issues has resulted in the acceptance for CE
credit by the leading organization in the field, the International Association of Privacy Professionals.
Enter Cyber Attacks and Cybersecurity
By the time of the most recent update to the CITRMS® XV course, cybersecurity had developed to the
point that the ICFE included a whole section on the topic. We were fortunate enough to count on Gary
Miliefsky, Publisher of Cyber Defense Magazine, to provide that content for the course.
At this juncture, ICFE is undertaking to launch an update and expansion of the CITRMS® course.
This will include an enhanced section on Cybersecurity, developments in the attack vectors, public and
private responses, and the implications for consumers, businesses, and organizations with the
responsibility of maintaining the confidentiality, integrity, and accessibility of sensitive information.
Cyber Defense eMagazine – February 2022 Edition 19
Copyright © 2022, Cyber Defense Magazine. All rights reserved worldwide.