1. Home
  2. |Insights
  3. |Attention Security Managers and FSOs

Attention Security Managers and FSOs

Client Alert | 1 min read | 07.05.17

The Office of the Director of National Intelligence has issued Security Executive Agency Directive 3, and increased reporting requirements for executive branch employees and contractors with access to classified information or who hold sensitive positions. Among other things, covered individuals must report non-work related foreign travel to their local security office for advance approval and security briefing, and any unplanned day trips into Mexico or Canada must be reported within five days of returning to the U.S. Additionally, the directive requires that all individuals with access to classified information report any continuing association with foreign nationals with whom they share “affection, personal obligation or intimate contact,” as well as any contact with foreign nationals that results in the sharing of personal information.

Insights

Client Alert | 7 min read | 08.17.26

Delayed Notification of Cyberattacks May Trigger HIPAA Breach Notification Rule

After identifying a ransomware attack in 2021, OSF Healthcare System waited until its forensic investigation had concluded before notifying the U.S. Department of Health and Human Services (HHS) — and the affected individuals — of the breach. The 110-day delay (nearly double the 60-calendar-day notification deadline mandated by the HIPAA Breach Notification Rule) triggered an investigation from HHS’s Office for Civil Rights (OCR). The health system’s investigation determined that protected health information (PHI) had been stolen....