SEC Recommendations to Protect Against Cybersecurity Threats
March 09, 2020 —
Shaia Araghi and Jeffrey Dennis – Newmeyer DillionWhat Happened?
The Securities and Exchange Commission's Office of Compliance Inspections and Examinations ("OCIE") issued a detailed
report on January 27, 2020 regarding various ways for organizations to safeguard data and protect against security and data breaches. Cyber threat actors are now invading data in a more sophisticated manner than ever before, and implementation of the SEC's recommended practices are essential in order to protect from outside vulnerabilities.
What is at Risk?
If market participants fail to implement these recommended policies, they will become more vulnerable to external attacks and data breaches. This can weaken an organization or firm if all employees are not properly trained and informed of the increasing dangers of cybersecurity breaches.
What Can You Do to Protect Yourself from a Cybersecurity Threat?
1.
Governance and Risk Management. Senior leaders should make efforts to improve the cyber safety at their organization. Some of these efforts may include:
- Devote attention to overseeing the organization's cybersecurity and resilience programs;
- Develop a risk assessment process to identify and mitigate cybersecurity risks to the organization;
- Adopt and implement policies and procedures regarding these risks;
- Promptly respond and adapt to changes by updating policies and procedures when necessary; and
- Establish communication policies and procedures to provide timely information to customers, employees, and others when needed.
2.
Access Rights and Controls. Implement updated controls to determine appropriate users for organization systems, limit access as appropriate to authorized users (including the set-up of multi-factor authentication) and monitor user access.
3.
Data Loss Prevention. OCIE has recommended various important data loss prevention measures for organizations:
- Establish a vulnerability management program;
- Implement capabilities that can monitor network traffic and detect threats on endpoints;
- Establish a patch management program covering all software and hardware;
- Maintain an inventory of hardware and software assets;
- Encrypt data and implement network segmentation;
- Create an insider threat program to monitor any suspicious behaviors; and
- Secure legacy systems and equipment through disposal of sensitive information from hardware and software and by reassessing vulnerability and risk assessments.
4.
Mobile Security. Establish policies and procedures for mobile device use, manage use of mobile devices through a mobile device management application, implement security measures for internal and external users, and train employees on mobile device policies and effective practices.
5.
Incident Response and Resiliency. Detect and disclose material information regarding incidents in a timely manner and assess appropriateness of corrective actions taken in response to incidents. Organizations should develop a plan if an incident occurs, address applicable reporting requirements, assign staff to execute specific areas of the plan, and test and assess the plan. In the event that a data breach occurs, an organization should improve its resiliency by maintaining an inventory of core business services and prioritizing business operations based on an assessment of risks.
6.
Vendor Management. Establish a vendor management program to ensure that vendors meet your organization's security requirements. Organizations should aim to understand all contract terms with vendors to ensure that all parties are in agreement regarding risk and security. Organizations should also monitor third-party vendors and ensure that the vendor continues to meet the organization's security requirements.
7.
Training and Awareness. Train staff to implement cybersecurity policies of the organization. Organizations should provide cybersecurity and resiliency training and re-evaluate the effectiveness of training procedures.
A Final Reminder for Organizations
Organizations should strive to implement as many of the SEC's recommended protection measures as possible. Ensuring that senior members of an organization are leading the initiative in increased awareness about cybersecurity threats through training of employees will lead to greater cyber safety for the overall organization. Although prevention of all breaches cannot be guaranteed, developing data loss prevention plans to keep the organization and its core businesses safe from attack will benefit the entire organization.
How We Can Help
If you feel that your business falls below the SEC's recommended security measures, our firm can assist with compliance. Contact us for a free initial consultation to determine a reasonable and practical way for your business to become compliant with these guidelines.
Shaia Araghi is an associate in the firm's Privacy & Data Security, and supports the team in advising clients on cyber-related matters, including compliance and prevention that can protect their day-to-day operations. For more information on how Shaia can help, contact her at shaia.araghi@ndlf.com.
Jeff Dennis (CIPP/US) is the Head of the firm's Privacy & Data Security practice. Jeff works with the firm's clients on cyber-related issues, including contractual and insurance opportunities to lessen their risk. For more information on how Jeff can help, contact him at jeff.dennis@ndlf.com.
About Newmeyer Dillion
For 35 years, Newmeyer Dillion has delivered creative and outstanding legal solutions and trial results that achieve client objectives in diverse industries. With over 70 attorneys working as a cohesive team to represent clients in all aspects of business, employment, real estate, environmental/land use, privacy & data security and insurance law, Newmeyer Dillion delivers holistic and integrated legal services tailored to propel each client's success and bottom line. Headquartered in Newport Beach, California, with offices in Walnut Creek, California and Las Vegas, Nevada, Newmeyer Dillion attorneys are recognized by The Best Lawyers in America©, and Super Lawyers as top tier and some of the best lawyers in California and Nevada, and have been given Martindale-Hubbell Peer Review's AV Preeminent® highest rating. For additional information, call 949.854.7000 or visit www.newmeyerdillion.com.
Read the court decisionRead the full story...Reprinted courtesy of
Will a Notice of Non-Responsibility Prevent Enforcement of a California Mechanics Lien?
March 05, 2015 —
William L. Porter – Porter Law Group, Inc.The “Notice of Non-Responsibility” is one of the most misunderstood and ineffectively used of all the legal tools available to property owners in California construction law. As a result, in most cases the answer to the above question is “No”, the posting and recording of a Notice of Completion will not prevent enforcement of a California Mechanics Lien.
The mechanics lien is a tool used by a claimant who has not been paid for performing work or supplying materials to a construction project. It provides the claimant the right to encumber the property where the work was performed and thereafter sell the property in order to obtain payment for the work or materials, even though the claimant had no contract directly with the property owner. When properly used, a Notice of Non-Responsibility will render a mechanics lien unenforceable against the property where the construction work was performed. By derailing the mechanics lien the owner protects his property from a mechanics lien foreclosure sale. Unfortunately, owners often misunderstand when they can and cannot effectively use a Notice of Non-Responsibility. As a result, the Notice of Non-Responsibility is usually ineffective in protecting the owner and his property.
The rules for the use of the Notice of Non-Responsibility are found in California Civil Code section 8444. Deceptively simple, the rules essentially state that an owner “that did not contract for the work of improvement”, within 10 days after the owner first “has knowledge of the work of improvement”, may fill out the necessary legal form for a Notice of Non-Responsibility and post that form at the worksite and record it with the local County Recorder in order to prevent enforcement of a later mechanics lien on the property.
What commonly occurs however is that early in the process the owner authorizes or even requires its tenant to perform beneficial tenant improvements on the property. This authorization is often set forth in a tenant lease or other written document. The dispositive factor for determining whether the Notice of Non-Responsibility will be enforceable though is that the owner knows that these improvements will be made to the property and intends that they be made, usually long before the work begins. Indeed, the owner has usually negotiated these very terms into the lease contract. The owner then mistakenly believes that once work on the property commences it has 10 days to post and record a Notice of Non-Responsibility and thereby protect itself from a mechanics lien.
The usual error is two-fold. First, the statute states that the Notice is available when the owner “did not contract for the work of improvement”. The fact though is that the owner did contract for the work of improvement. It did so through the lease contract. This is true even though the owner’s contract was not with the contractor or supplier directly. Secondly, the 10 day period to post and record the Notice begins when the owner first “has knowledge” of the work of improvement. This knowledge was of course gained when the lease was negotiated and signed, providing knowledge typically many days before the work has begun. Thus, the 10 day period can also seldom be met. The Notice of Non-Responsibility will therefore fail both rules because the owner has in fact contracted for the improvement and because he does not act within 10 days of gaining this knowledge.
The next event in the typical scenario occurs when the tenant does not pay its contractor. The contractor then has nothing to pay its subcontractors. Material suppliers also go unpaid. Mechanics liens are then recorded by the unpaid claimants, followed by foreclosure actions within ninety days thereafter. Owners will typically point to the Notice of Non-Responsibility they posted and recorded, claiming its protection. Claimants then in turn point to the lease or other evidence that the owner knew of the pending improvements and contracted in some way that the improvements be performed, often also more than 10 days before they posted the Notice. Judges generally agree with the unpaid mechanics lien claimants and the Notice of Non-Responsibility is deemed ineffective.
The fact that the Court does not enforce the Notice of Non-Responsibility under these circumstances is not an unfair result. Since the owner authorized the work to be performed and it received a substantial benefit in the form of those improvements, it is not unfair that the owner should pay for those benefits. It would be inequitable for the owner to obtain the benefit of the improvements which it authorized but for which it did not pay, while allowing those who provided the benefit to go unpaid. Moreover, without such a system in place the door would be open to owners setting up sham “tenants” who would enter into contracts to have work performed, only to disappear when the work is completed, leaving the contractor without a source of payment. The system in place as described above prevents such duplicity. Owners would do well to arm themselves with proper knowledge of when the Notice of Non-Responsibility will and will not protect them and then responsibly use the Notice of Non-Responsibility.
For the legal eagles among you, the following cases illustrate the view of the courts, consistent with the above: Baker v. Hubbard (1980) 101 Cal.App.3d 226; Ott Hardware v. Yost (1945) 69 Cal. App.2d 593 (lease terms); Los Banos Gravel Co. v. Freeman (1976) 58 Cal.App.3d 785 (common interest); Howard S. Wright Construction Co. v. Superior Court (2003); 106 Cal.App.4th 314 (participating owner).
William L. Porter of
Porter Law Group, Inc. located in Sacramento, California may be contacted at (916) 381-7868 or bporter@porterlaw.com
Read the court decisionRead the full story...Reprinted courtesy of
Florida Condos Bet on Americans Making 50% Down Payments
October 29, 2014 —
John Gittelsohn – BloombergJorge Perez crashed along with the real estate market, then regained his crown as Florida’s “Condo King” by building new projects with 50 percent deposits from foreign buyers. Now, for his next development, he’s looking to wealthy Americans.
In December, he’ll begin marketing the Auberge Beach Residences and Spa Fort Lauderdale, a $500 million oceanfront project 35 miles (56 kilometers) north of Miami. He expects as many as two-thirds of the buyers to come from the U.S. or Canada. All future owners must pay hefty deposits to finance construction by Perez’s Related Group, Fortune International Group and Fairwinds Group in a partnership that the companies plan to announce tomorrow.
“The U.S. buyers have made up an increasing share of luxury beachfront condominiums and, like our foreign buyers, they have shown little resistance to larger deposits,” Perez said in an e-mail. “Most feel that if they can’t put a 50 percent down payment, they probably should not be buying.”
Read the court decisionRead the full story...Reprinted courtesy of
John Gittelsohn, BloombergMr. Gittelsohn may be contacted at
johngitt@bloomberg.net
Steven L. Heisdorffer Joins Higgins, Hopkins, McLain & Roswell
March 27, 2019 —
Steve Heisdorffer - Colorado Construction LitigationHiggins, Hopkins, McLain & Roswell is pleased to announce that Steve Heisdorffer has joined the firm as Special Counsel. Steve joins the firm after having been a partner at Godin & Baity, LLC for the last twenty-five years.
Mr. Heisdorffer represents construction professionals in construction defect disputes and advises them regarding risk mitigation and transfer. Mr. Heisdorffer is an experienced trial lawyer that has tried commercial disputes and construction defect cases in arbitration forums and courts over the last 28 years. In addition, he has successfully represented large and small companies in commercial disputes, including computer software performance and intellectual property disputes, taking several to trial. Steve has also acted as a counselor to technology companies. Steve has expertise drafting and negotiating development agreements, distributor agreements, license agreements, and service agreements for his technology clients.
Mr. Heisdorffer graduated with high honors from both the University of Northern Iowa and University of Iowa, College of Law and is an AV ® Preeminent™ Peer Review Rated attorney by Martindale-Hubbell and has presented to a variety of trade groups including technology, construction, and insurance industries.
Read the court decisionRead the full story...Reprinted courtesy of
Steve Heisdorffer, Higgins, Hopkins, McLain & RoswellMr. Heisdorffer may be contacted at
heisdorffer@hhmrlaw.com
Appeals Court Overruled Insured as Additional Insured on Subcontractor’s Commercial General Liability Policy
April 02, 2014 —
Beverley BevenFlorez-CDJ STAFFScott R. Murphy and Clifford J. Shapiro of Barnes & Thornburg LLP in the publication National Law Review analyzed the findings of the Mississippi case Carl E. Woodward, LLC v. Acceptance Indemnity Insurance: “the U.S. Court of Appeals for the Fifth Circuit overruled the district court’s determination that a general contractor was insured as an additional insured on its subcontractor’s commercial general liability (CGL) policy for claims arising out of the allegedly defective work performed by the subcontractor.”
“This case underscores the fact that many standard policy forms do not include completed operations coverage for additional insureds,” Murphy and Shapiro declared. “Owners and contractors that desire to have such coverage therefore need to check their contracts to be make sure the contract language requires completed operations coverage for additional insureds, and they also need to obtain and review the actual additional insured endorsement contained in their subcontractors’ insurance policies before work commences to make sure that the required completed operations insurance coverage is provided.”
Read the court decisionRead the full story...Reprinted courtesy of
Five Frequently Overlooked Points of Construction Contracts
October 18, 2021 —
Craig H. O'Neill - White and Williams LLPThere is no shortage of articles addressing the key points of construction contracts. Just enter that phrase into any internet search engine and you will find plenty. It should go without saying that a construction contract should be in writing, it should clearly identify the scope of work to be performed and the sums to be paid for that work, and it should address the parties’ rights and responsibilities with regard to termination or suspension of the contract, correcting defective work, and handling claims and disputes—just to name a few. Of course, these items should receive their due consideration. Too often, however, other important aspects of the construction contract get shortchanged. This article aims the spotlight on five often overlooked aspects of construction contracts.
Project Schedules
Surprisingly, many construction contracts pay little attention to a central component of any construction project: the project schedule. Many contracts provide the dates of commencement and substantial completion but not much else. With the frequent use of project management techniques such as the Critical Path Method (CPM) and the associated software, it is easier than ever to identify which tasks should be prioritized and identify potential areas of delay. The owner’s contract with the general contractor should clearly define the scheduling methods used and provide measures to keep the parties informed of the progress of the work. By including basic scheduling requirements in the contract documents—such as the submission of “Baseline Project Schedules” (consistent with the contract time provisions), “Schedule Progress Updates” (comparing the progress of the work against the Baseline Project Schedule), and “Schedule Recovery Plans” (when Schedule Project Updates indicate projected delays)—the parties can avoid or reduce disputes over project delays that often lead to litigation.
Read the court decisionRead the full story...Reprinted courtesy of
Craig H. O'Neill, White and Williams LLPMr. O'Neill may be contacted at
oneillc@whiteandwilliams.com
2011 West Coast Casualty Construction Defect Seminar – Recap
June 01, 2011 —
CDJ STAFF  |
| Event exhibitors and sponsors contribute to an informative and engaging environment |
This year’s meeting was the best yet for the industry-leading construction defect and claims event.
This year’s seminar concluded on May 13, 2011 with the Construction Defect Community Charitable Foundation Golf Tournament, held at Strawberry Farms Golf Course.
The Disneyland Hotel in Anaheim, California was the place where more than 1,500 attendees convened for two days of professional development activities and seminars that included CLE workshops and panel discussions of special interest to legal and insurance professionals concerned with construction defect and claims litigation. Key events included “Challenges for Experts in Construction Defect Claims and Litigation,” “Keeping Up with Construction Defect Coverage,” and “Tips for Avoiding the ‘Perfect Storm’ in Handling of Wrap Claims.”
 |
| Supporting the golf tournament at the 15th hole |
This year’s Ollie award was given to George D. Calkins II, Esq. The West Coast Casualty Jerrold S. Oliver Award of Excellence was named in honor of the late Judge Jerrold S. Oliver, and recognizes an individual who is outstanding or has contributed to the betterment of the construction community.
In addition to being the most comprehensive professional development seminar in the area of construction defects, this year’s seminar was equally valuable as a networking opportunity for members of the industry. People participated in professional development events during the day and then continued networking in the evening at numerous social events. The Lawn Party as well as the legendary Wood, Smith, Henning & Berman events were very well attended. Additional valuable networking events were hosted by a number of industry professionals at the House of Blues, and Tortilla Joe’s.
As of this writing the 2011, West Coast Casualty's Construction Defect Seminar has applied for or has already received the following continuing education accreditation in the following areas;
Read the full story…
For more information about next year’s event, visit West Coast Casualty.
Read the court decisionRead the full story...Reprinted courtesy of
Tokyo Tackles Flood Control as Typhoons Swamp Subways
August 20, 2014 —
Jacob Adelman – BloombergBelow the condos and boutiques of Tokyo’s upscale Minato ward -- which includes Roppongi Hills, home to Goldman Sachs Group’s Japan headquarters -- a boring machine has carved out the city’s newest defense against floods.
“There are many buildings, there’s a freeway,” said Satoshi Yamamoto, who’s directing the Tokyo government’s 24.5 billion yen ($240 million) project to build a giant subterranean reservoir -- the city’s second of three -- to handle flood waters from the Furukawa river that winds through the area. “We decided the best approach was to go underground.”
When it’s completed in 2016, the 3.3-kilometer (2-mile) reservoir will be able to handle 135,000 cubic meters of water, enough to fill 54 Olympic-sized swimming pools. Tokyo is becoming increasingly reliant on this solution as more typhoons hit the country each year, a trend that Yamamoto said may be linked to global warming. The flooding is exacerbated by the city’s sprawling concrete footprint that keeps rainwater from seeping safely into the ground.
Read the court decisionRead the full story...Reprinted courtesy of
Jacob Adelman, BloombergMr. Adelman may be contacted at
jadelman1@bloomberg.net
