Data Matters

JANUARY 14, 2019

On December 19, 2018, Ohio adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law. The Act is designed to “establish standards for data security and for the investigation and notification to the Superintendent of Insurance of a cybersecurity event.”.

Insurance 68

Insurance Security Cybersecurity Data breaches 68

The Last Watchdog

APRIL 8, 2024

Related: The ‘cyber’ case for D&O insurance Vanessa Pegueros knows this all too well. If the CISO wants to drive better compliance, then they talk about how compliance is key to enabling sales and how the customers are demanding compliance to do business with the company.

Compliance 210

Compliance Cybersecurity Risk Mining 210

Thales Cloud Protection & Licensing

JULY 4, 2022

How Cybersecurity Insurance Can Work To Help An Organization. In the last 20+ years, cybersecurity insurance has added risk transference to the available palette of palliative choices. I recently spoke with Neira Jones and Danna Bethlehem about how cybersecurity insurance can work to help an organization. regulations.

Insurance 71

Insurance Cybersecurity Cleanup Ransomware 71

Data Matters

FEBRUARY 10, 2021

2 announcing a Cyber Insurance Risk Framework (the Framework) that describes industry best practices for New York-regulated property/casualty insurers. According to NYDFS, the incorporation of these practices should be proportionate to each insurer’s size, resources, geographic distribution, and other factors. The Framework.

Insurance 79

Insurance Financial Services Cybersecurity Risk 79

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.

Insurance 68

Insurance Security Cybersecurity FOIA 68

Hunton Privacy

AUGUST 6, 2019

On August 2, 2019, New Hampshire Governor Chris Sununu signed into law SB 194 (the “Bill”), which requires insurers licensed in the state (“licensees”) to put in place data security programs and report cybersecurity events. The state insurance commissioner may take “necessary or appropriate” action to enforce the new law.

Insurance 81

Insurance Security Cybersecurity Information Security 81

Hunton Privacy

JULY 1, 2022

(“Carnival”), the world’s largest cruise-ship operator, for violations of the Cybersecurity Regulation (23 NYCRR Part 500) in connection with four cybersecurity events between 2019 and 2021, including two ransomware events. . NYDFS also found that Carnival had failed to implement basic protocols to prevent data breaches.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

Data Matters

JULY 30, 2018

In October 2017, the National Association of Insurance Commissioners (NAIC) adopted an Insurance Data Security Model Law. On May 3, 2018, South Carolina became the first state to enact this Model Law, in the form of the South Carolina Insurance Data Security Act (H.B. See CT Gen Stat § 38a-999b (2015) ; 23 NYCRR 500.

Insurance 60

Insurance Security Cybersecurity Data breaches 60

eSecurity Planet

APRIL 29, 2024

Risk then prioritizes security controls with the goal to deliver truly effective security as opposed to checkbox compliance. Governance, risk, and compliance (GRC): Tracks data risks in a daily regulatory context with less attention paid to technologies, strategies, and business goals. What Is an Integrated Risk Management Framework?

Risk 67

Risk Compliance Communications Insurance 67

AIIM

JULY 24, 2018

Three Critical Steps for GDPR Compliance. GDPR Compliance Starts with Data Discovery. There are a number of areas where GDPR strengthens compliance obligations and imposes additional legal liabilities. This is the 11th post in a series on privacy by Andrew Pery. Data Privacy and Open Data: Secondary Uses under GDPR.

GDPR 83

GDPR Compliance Privacy Data Privacy 83

Data Matters

FEBRUARY 20, 2019

On January 18, 2019, the New York State Department of Financial Services (NYDFS) issued Circular Letter 2019-1 (the Circular Letter), addressing insurers’ use of external consumer data and information sources in underwriting for life insurance. Unlawful Discrimination.

Insurance 68

Insurance Financial Services Compliance Retail 68

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

DLA Piper Privacy Matters

MAY 17, 2018

The guide reviews the insurability of GDPR fines across Europe, which can reach up to €20 million or, if higher, up to 4% of a group’s annual global turnover. It also looks at insurability of costs associated with GDPR non-compliance (e.g. Criminal penalties are almost never insurable.

Insurance 45

Insurance GDPR Data breaches Personal data 45

The Last Watchdog

MARCH 13, 2023

In other words, they shouldn’t detail how cybersecurity spending drives revenue and that cuts to the security program directly affect relationships and requirements with three key constituencies: customers, insurers, and regulators. Ultimately, cybersecurity can become a profit center when customers, insurers, and regulators require it.

Security 203

Security Insurance Cybersecurity Customer Experience 203

Thales Cloud Protection & Licensing

MARCH 6, 2018

Every year, new regulations and compliance orders come into play that impact businesses across the world. Using encryption solutions like the solutions Thales provides, companies can encrypt their data, rendering the data unintelligible in the event of a breach. Encryption is key when it comes to protecting data.

Compliance 88

Compliance GDPR Encryption Data Privacy 88

Data Matters

FEBRUARY 7, 2018

Companies that are subject to New York’s Cybersecurity Regulation are moving quickly to finalize their compliance obligations under the Cybersecurity Regulation, as the second “due date” quickly approaches – February 15, 2018. They also became obligated to report cybersecurity events to the NYDFS. .

Compliance 60

Compliance Cybersecurity Information Security Privacy 60

Data Protection Report

APRIL 22, 2021

On April 14, 2021, the New York Department of Financial Services (NYDFS) announced a $3 million settlement with insurance company National Securities Corp. The regulation requires that a licensee report a cybersecurity event to NYDFS within 72 hours of its determination of the event. NYDFS Cybersecurity Regulation.

Cybersecurity 94

Cybersecurity Financial Services Phishing Compliance 94

IBM Big Data Hub

DECEMBER 8, 2023

The only way for effective risk reduction is for an organization to use a step-by-step risk mitigation strategy to sort and manage risk, ensuring the organization has a business continuity plan in place for unexpected events. Contingency plans should be in place if something drastic changes or risk events occur.

Risk 74

Risk Compliance Insurance IT 74

Data Protection Report

OCTOBER 3, 2021

The amendment: Expands the definition of “personal information”; Shortens the notification deadline after discovery of a breach from 90 to 60 days; Removes the requirement to consult with law enforcement as part of a risk assessment; Deems compliant any person subject to and in compliance with HIPAA and HITECH; and.

Data breaches 142

Data breaches IT Insurance Passwords 142

eSecurity Planet

MARCH 18, 2022

In this article, we’ll briefly touch on what policies are; tips for writing them; and the advantages policies provide for compliance, transitions, and IT team liability. Policies can cover multiple technologies, but should be labeled clearly for internal and compliance auditor reference. Written Policies vs. Implemented IT Policies.

IT 117

IT Compliance Security Access 117

Thales Cloud Protection & Licensing

APRIL 11, 2023

IAM is no longer just a means to be compliance- and audit-friendly. It got the board’s attention because it was no longer a case of piecemeal operational efficiency improvement or compliance – it was a case of business continuity and survival. We should not need a life-changing event like a pandemic to change our course.

B2C 87

B2C B2B Retail Insurance 87

erwin

APRIL 11, 2019

Some industries, such as healthcare and financial services, have been subject to stringent data regulations for years: GDPR now joins the Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry Data Security Standard (PCI DSS) and the Basel Committee on Banking Supervision (BCBS). employees).

GDPR 100

GDPR e-Discovery Compliance Metadata 100

IT Governance

OCTOBER 11, 2022

One of the most common mistakes that organisations make when addressing cyber security is that they consider it a one-off event. Why Cyber Insurance is Essential in 2022. ISO 27001 can also be used as a framework to help organisations achieve GDPR compliance.

Risk 124

Risk GDPR Information Security Personal data 124

IBM Big Data Hub

MARCH 20, 2024

Organizations in the financial services, healthcare and other regulated sectors must place an even greater focus on managing risk—not only to meet compliance requirements, but also to maintain customer confidence and trust.

Cloud 80

Cloud Financial Services Risk Business Services 80

Thales Cloud Protection & Licensing

NOVEMBER 15, 2023

Maintaining compliance Airports face increased pressure to comply with an increased patchwork of government and airport-specific regulations to ensure the security and privacy of their staff and passengers. Enforce, sustain, and prove compliance with increasing regulatory and cyber insurance requirements.

Cybersecurity 87

Cybersecurity Authentication Access Compliance 87

IT Governance

FEBRUARY 22, 2022

By managing risks, organisations gain a comprehensive understanding of the specific ways that they could suffer data breaches and other disruptive events, and the steps they can take to protect themselves. Information security management standards and compliance.

Information Security 138

Information Security Security Data breaches Risk 138

Hunton Privacy

SEPTEMBER 22, 2021

Cyberattack victims, financial institutions, insurance firms and other companies assisting with ransomware payments are responsible for ensuring that they do not engage in unauthorized transactions prohibited by OFAC sanctions. In the event of an apparent violation of U.S. sanctions regulations.

Ransomware 101

Ransomware Risk Compliance Insurance 101

eSecurity Planet

AUGUST 4, 2023

At any size event, a buyer may run into a representative of a potential IT outsourcing vendor in the hall, in the audience, or at a networking event such as lunch or a reception. More often, the compliance requirements may not apply to the vendor. More often, the compliance requirements may not apply to the vendor.

IT 89

IT Compliance Cybersecurity Communications 89

IBM Big Data Hub

FEBRUARY 14, 2024

They can also help businesses predict future events and understand why past events occurred. By infusing AI into IT operations , companies can harness the considerable power of NLP, big data, and ML models to automate and streamline operational workflows, and monitor event correlation and causality determination.

Artificial Intelligence 88

Artificial Intelligence Retail Unstructured data Insurance 88

Data Matters

AUGUST 19, 2020

On July 21, 2020, the New York State Department of Financial Services (NYDFS or the Department) issued a statement of charges and notice of hearing (the Statement) against First American Title Insurance Company (First American) for violations of the Department’s Cybersecurity Requirements for Financial Services Companies, 23 N.Y.C.R.R.

Financial Services 68

Financial Services Cybersecurity Insurance Risk 68

Hunton Privacy

APRIL 27, 2017

August 28, 2017 – the 180-day transitional period ends and covered entities are required to be in compliance with requirements of the NYDFS Regulation unless otherwise specified. Covered entities are required to develop a third-party service provider compliance program. March 1, 2019 – the two year transitional period ends.

Cybersecurity 53

Cybersecurity Compliance Financial Services Insurance 53

Collibra

JULY 7, 2022

Any of these typical corporate events can wreak havoc on your data pipelines and cause data downtime. Even when there isn’t a significant corporate event, data engineers are concerned about data quality issues: Is my data loading on time? Does this insurance customer have a home and auto policy? .

Data migration 52

Data migration Insurance Analytics Risk 52

HL Chronicle of Data Protection

FEBRUARY 25, 2020

It applies to any “Covered Entity,” which is defined broadly to include “any Person operating under or required to operate under a license, registration, charter, certificate, permit, accreditation or similar authorization under the Banking Law, the Insurance Law or the Financial Services Law.”

Cybersecurity 104

Cybersecurity Financial Services Data breaches Insurance 104

Shoreline Records Management

SEPTEMBER 26, 2023

In this blog, we will explore the recommended guidelines for retaining medical records and the significance of proper record-keeping for patient care, legal compliance, and data privacy. Furthermore, medical records are valuable for legal purposes, such as medical malpractice lawsuits, insurance claims, and disability applications.

Paper 26

Paper Compliance Insurance Records Management 26

The Last Watchdog

MARCH 1, 2019

There is a gaping shortage of analysts talented enough to make sense of the rising tide of data logs inundating their SIEM (security information and event management) systems. LW: How does ‘compliance’ factor in? Sutton: Compliance is actually the iceberg under the surface for SOAR. But this hasn’t done the trick.

Digital transformation 193

Digital transformation Marketing Analytics Risk 193

IT Governance

SEPTEMBER 13, 2022

Organisations are continually urged to invest more in defences – whether it’s technological solutions, staff awareness training or revamped compliance practices – but if those solutions aren’t part of a cohesive strategy, the benefits will be minimal. Ultimately, it can cover the cost of-rebuilding if all else fails.

Risk 110

Risk Security Data breaches Phishing 110

eSecurity Planet

JANUARY 12, 2021

Your security risk assessment will most likely be aimed at measuring the security strength or weakness of the organization as well as checking in on compliance requirements and industry frameworks. Cybersecurity preparedness/ insurance. Failure to meet appropriate compliance and data privacy rules can cause more than cyber risks.

Risk 70

Risk Security Cybersecurity Compliance 70