Security Awareness — Not Just an IT and Compliance Responsibility

Since the start of 2021, cyber-attacks have dominated headlines across every industry. From governments and government organizations, healthcare companies, and banks, to gaming companies and oil pipelines, ransomware has impacted organizations of all types and sizes. The scale and scope of these attacks have continued to grow and have far reaching consequences. Despite current agency attempts to strengthen cybersecurity through regulation, individual users continue to pose a serious threat due to insufficient security education.  

Concert Venues Crowd Control Regulations

On November 5, 2021, Travis Scott performed a concert at the Astroworld Festival in Austin to a crowd of fifty thousand people. In the hour that he performed, eight people were killed in a deadly crowd crush (another concert goer losing their life days after), and hundreds were injured. Multiple lawsuits have been filed against Travis Scott himself, as well as the production companies that organized the show in response to the tragedy. In the wake of the devastating event, regulations concerning crowd control and management must also be considered, as well as whether these regulations were complied with by the organizers of Astroworld.

The Discriminatory Policies against Gay and Bisexual Men that are Fueling the National Blood Crisis

This past January, the American Red Cross announced that the United States was facing its worst blood shortage in over a decade, posing a significant risk to patient care and causing doctors to make difficult decisions in determining which patients should be prioritized for blood transfusions given the dwindling supply. The staggering decrease in blood and platelet donations can be attributed to the global COVID-19 pandemic driving up the need for donations and the hesitancy people have had to leave their homes over the past two years. Even in this desperate time of need for blood, gay and bisexual men in America are still prevented from donating because of discrimination.

Critical Infrastructure and Cybersecurity Legislation: America’s Cybersecurity Problem

Long gone are the days when cybersecurity concerns existed solely in the domain of technology teams. Various organizations, from schools to government entities (at every level), to private companies alike have fallen prey to cyberattacks. May 2021’s Colonial Pipeline attack caused chaos and a temporary gas frenzy that brought awareness of the vulnerabilities of the technology we rely on to even the least technically minded American. Cybersecurity, and more specifically, the security of critical infrastructure immediately became an issue that the U.S. Government is taking very seriously.

Stablecoins II: The Stablecoin Innovation and Protection Act of 2022

On Tuesday, February 15, 2022, Congressman Josh Gottheimer released a draft of the Stablecoin Innovation and Protection Act of 2022 (“the bill”). This legislation attempts to both define stablecoins as well as provide a legal framework in which the issuers and users of stablecoins can safely and legally operate. The bill is surprisingly brief, only nine pages long, but Gottheimer claims that it will provide greater direction and certainty to the marketplace in order to boost innovation while also protecting consumers.

First Amendment Rights and Florida’s “Don’t Say Gay” Bill

Florida’s “Don’t Say Gay” bill, which would bar Florida educators from speaking to students about LBGTQ+ topics that are not considered “age-appropriate or developmentally appropriate for students” has passed in Florida’s House and is likely to pass in the Senate as it now moves to the Republican-controlled Senate floor for a vote. The horrific piece of legislation, formally known as HB 1557, has raised questions as to whether the bill, if passed, would violate the First Amendment rights of teachers or students in public primary schools across the sunshine state.

The First Cyber War: The Threat of Russian Cyberattacks has Thrust Cybersecurity Compliance into the Spotlight

The impact of Russia’s unprovoked attack on Ukraine on February 24, 2022 has not only caused a horrific human rights crisis but has also had a dramatic effect on how the world conducts business, felt well beyond the borders of Russia and Ukraine. Warnings of an imminent Russian cyberattack on critical United States infrastructure has small and large businesses alike brushing up their cybersecurity policies to ensure they are compliant with current best practices in the likely event of a Russian cyberattack and impending federal legislation.

Senate Brings Bipartisan Attempt to Update Health Privacy Regulations

On February 9, a group of senators led by Tammy Baldwin of Wisconsin and Bill Cassidy of Louisiana introduced a new bill, the Health Data Use and Privacy Commission Act (the “Act”),  in attempt to revitalize current legislation regarding the protection and use of health data. The bill also has the support of a number of representatives from within the healthcare industry, including Epic, IBM, and Teladoc Health, as well as a number of professional associations like the American College of Cardiology, the Association for Behavioral Health and Wellness, and the Association of Clinical Research Organizations.

FDA’s Proposed Global Regulatory Harmonization for Medical Devices

On February 23, 2022, the Food and Drug Administration (FDA) published a proposed regulation to amend current manufacturing practice requirements of the Quality System Regulation (QSR) (21 CFR Part 820). The FDA first announced such harmonization in 2018, however COVID-19 delayed the proposal. The FDA seeks to align Part 820 more closely with the international specific standard for medical device quality management systems set out by the International Organization for Standardizations (ISO) 13485. According to the FDA, such “harmonization should provide patients more efficient access to necessary devices, leading to improvements of life quality of the consumers.” Part 820 is part of the current mandatory regulations that ensure that all medical devices created and developed within the US market are safe. ISO 13485 is the international standard for a quality management system for medical devices required by certain countries. Therefore, any manufacturer that sells outside the US will likely need to be ISO 13485 certified. With the implementation of this new amendment, manufacturers would be able to assure their products are regulatorily compliant in both the US and international markets.

Why a Culture Change in the Workplace Benefits your Mentoring Program

It’s hard and expensive to find and retain good employees. With this in mind, it’s not a surprise that companies are willing to try all sorts of things to make sure their employees stick around. For example, many companies have attempted to establish corporate mentorship programs where newer employees are paired up with veterans who can show them the way. But is this the right approach? Mentoring programs typically rely on single mentor-mentee matches and formal hierarchical pairings. Even if you can implement the best mentoring program, it is unlikely to achieve its intended result when the surrounding workplace is competitive and individualistic. For mentorship programs to have a real effect on the workplace, it seems that we all must take a step back and realize that real mentorship starts with company culture, not formal programs.