Gimmal

MARCH 12, 2024

In today’s litigious business climate, the specter of legal disputes looms large, and the effective management of legal holds has become a critical component of corporate compliance. This blog post delves into the financial implications of inadequate legal holds and underscores the importance of compliance.

Compliance 52

Compliance e-Discovery Data preservation Risk 52

Armstrong Archives

DECEMBER 19, 2023

Whether it’s maintaining regulatory compliance or simply making tax season easier, an effective record retention strategy is paramount. Training Staff on Record Retention Policy Employees at all levels should understand the importance of adhering to the company’s record retention policy.

Compliance 52

Compliance Archiving Digital transformation Sales 52

Rocket Software

MARCH 14, 2022

Analyst firm IDC recently published a Vendor Spotlight report featuring ASG Mobius Content Services (Mobius) and its applications in the financial service and insurance industries. IDP Trends in the Financial and Insurance Industries. Challenges to Effective IDP.

Financial Services 82

Financial Services Insurance Digital transformation Paper 82

Data Matters

FEBRUARY 10, 2021

2 announcing a Cyber Insurance Risk Framework (the Framework) that describes industry best practices for New York-regulated property/casualty insurers. According to NYDFS, the incorporation of these practices should be proportionate to each insurer’s size, resources, geographic distribution, and other factors. The Framework.

Insurance 79

Insurance Financial Services Cybersecurity Risk 79

Hunton Privacy

NOVEMBER 8, 2023

The NYDFS, which regulates financial institutions including insurance companies, mortgage brokers and banks, adopted the original Cybersecurity Regulation in 2017. For certain other requirements, regulated entities will have between one and two years to reach compliance.

Cybersecurity 72

Cybersecurity IT Compliance Financial Services 72

Data Matters

AUGUST 27, 2020

Department of Health and Human Services, Office for Civil Rights (“OCR”) has settled three cases related to alleged violations of the Health Insurance Portability and Accountability Act (“HIPAA”), totaling $1,165,000. Conducting appropriate training for employees who come into contact with ePHI as part of their professional duties.

Compliance 68

Compliance Security Risk Encryption 68

IT Governance

JULY 15, 2019

Cyber insurance is big business these days. Damages incurred by information security incidents generally aren’t covered in commercial insurance policies, so a specific policy is necessary to help cover the costs of things like forensic investigation, incident response and notification procedures. Perform staff awareness training.

Insurance 89

Insurance Data breaches Risk Information Security 89

Hunton Privacy

JULY 1, 2022

Since Carnival was licensed by the Department to sell insurance in NY State, it was treated as a covered entity under the Cybersecurity Regulation. Although Carnival had certified compliance with the Cybersecurity Regulation at the time of the incidents, NYDFS found that Carnival’s attestation of compliance was improper.

Cybersecurity 115

Cybersecurity Insurance Phishing Financial Services 115

Hunton Privacy

FEBRUARY 29, 2024

Distribute policies and procedures to the workforce and collect compliance certifications from all members. Submit its training materials to HHS for approval and provide appropriate training to the workforce within 30 days of HHS approval. Investigate all likely policy violations.

Ransomware 111

Ransomware Personal data Risk Privacy 111

eSecurity Planet

APRIL 29, 2024

The 911 call center needs a robust phone system, trained staff, and a decision-tree process to understand how to route issues to the appropriate emergency or non-emergency agencies to address a caller’s needs. Risk then prioritizes security controls with the goal to deliver truly effective security as opposed to checkbox compliance.

Risk 67

Risk Compliance Communications Insurance 67

The Last Watchdog

OCTOBER 5, 2023

Regular training and simulations can help reduce risks associated with human errors. Regular training and simulations can help reduce risks associated with human errors. What is the role of cybersecurity awareness training for a company’s employees? Regular awareness training for employees is indispensable.

Cybersecurity 203

Cybersecurity Privacy Cloud IoT 203

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. It includes multi-disciplinary risk and compliance management solutions and tools, including: IT & security risk management. Compliance management.

Compliance 57

Compliance Risk Government Retail 57

Armstrong Archives

AUGUST 25, 2023

The Health Insurance Portability and Accountability Act (HIPAA) ensures individuals’ health data protection and privacy. This includes insurance companies, nurses, and doctors. In this article, we’ll talk more about the HIPAA, the importance of compliance, some common HIPAA violations, and more!

Computer and Electronics 52

Computer and Electronics Insurance Compliance Risk 52

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Hunton Privacy

SEPTEMBER 22, 2022

The PHI included patient name, patient date of birth, date of sample collection, and the name of the provider who took the specimen, in violation of the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”). Training Requirements. As part of the settlement, NEDLC agreed to pay HHS $300,640.

Privacy 58

Privacy Compliance Insurance IT 58

eSecurity Planet

OCTOBER 18, 2022

Assessing AI and Security Training. The survey also found almost unanimous faith in the benefits of security awareness training: Fully 96 percent of respondents believe training can bring about long-term, positive changes to their employees’ cybersecurity behavior. What Should Security Buyers Do?

IT 122

IT Security Cybersecurity Marketing 122

KnowBe4

DECEMBER 6, 2022

Live Demo] Ridiculously Easy Security Awareness Training and Phishing. Old-school awareness training does not hack it anymore. Join us TOMORROW, Wednesday, December 7 @ 2:00 PM (ET) , for a live demo of how KnowBe4 introduces a new-school approach to security awareness training and simulated phishing. Did You Know?

Security awareness 91

Security awareness Phishing Risk Insurance 91

IT Governance

SEPTEMBER 13, 2022

Organisations are continually urged to invest more in defences – whether it’s technological solutions, staff awareness training or revamped compliance practices – but if those solutions aren’t part of a cohesive strategy, the benefits will be minimal. Ultimately, it can cover the cost of-rebuilding if all else fails.

Risk 110

Risk Security Data breaches Phishing 110

IT Governance

OCTOBER 11, 2022

Whether they’re taking small steps, such as installing antivirus software, or large ones, such as a GDPR (General Data Protection Regulation) compliance campaign, they consider it ‘job done’ when the implementation project is complete. Why Cyber Insurance is Essential in 2022.

Risk 124

Risk GDPR Information Security Personal data 124

Thales Cloud Protection & Licensing

JUNE 15, 2023

KMaaS providers typically offer features such as FIPS 140-2 certified Hardware Security Modules (HSMs) to ensure the highest security and compliance for sensitive keys. Sustained compliance: Encryption and effective key management are key requirements across all security and privacy regulations.

Encryption 133

Encryption Compliance Cloud Authentication 133

CGI

DECEMBER 7, 2017

Insurers’ top trends and priorities: A look at the 2017 CGI Client Global Insights (part 2). In my previous blog , I introduced findings from in-person interviews CGI held in 2017 with more than 1,300 client executives across 17 countries, including insurance business and IT executives. Thu, 12/07/2017 - 15:43.

Insurance 40

Insurance Digital transformation Artificial Intelligence GDPR 40

CGI

DECEMBER 5, 2017

Insurers’ top trends and priorities: A look at the 2017 CGI Client Global Insights (part 2). In my previous blog , I introduced findings from in-person interviews CGI held in 2017 with more than 1,300 client executives across 17 countries, including insurance business and IT executives. Tue, 12/05/2017 - 17:24.

Insurance 40

Insurance Digital transformation Artificial Intelligence GDPR 40

IBM Big Data Hub

FEBRUARY 13, 2024

The quality of outputs depends heavily on training data, adjusting the model’s parameters and prompt engineering, so responsible data sourcing and bias mitigation are crucial. Imagine training a generative AI model on a dataset of only romance novels. Existing content can be reimagined and edited using AI tools.

Artificial Intelligence 126

Artificial Intelligence Marketing Sales Communications 126

eSecurity Planet

MARCH 18, 2022

In this article, we’ll briefly touch on what policies are; tips for writing them; and the advantages policies provide for compliance, transitions, and IT team liability. Policies can cover multiple technologies, but should be labeled clearly for internal and compliance auditor reference. Written Policies vs. Implemented IT Policies.

IT 122

IT Compliance Security Access 122

IT Governance

JANUARY 30, 2019

May 2018 brought a whirlwind of panic as organisations rushed to meet the compliance deadline, but it was followed by months of unnerving silence. In this blog, we recap the essentials of compliance, explaining how the Regulation works, who it applies to and how you can avoid the same mistakes that Google made. The basics.

GDPR 86

GDPR Compliance Personal data Data breaches 86

IBM Big Data Hub

FEBRUARY 14, 2024

But right now, pure AI can be programmed for many tasks that require thought and intelligence , as long as that intelligence can be gathered digitally and used to train an AI system. Generative AI can produce high-quality text, images and other content based on the data used for training. We’re all amazed by what AI can do.

Artificial Intelligence 89

Artificial Intelligence Retail Unstructured data Insurance 89

Hunton Privacy

JULY 16, 2021

On July 13, 2021, federal bank regulators – the Board of Governors of the Federal Reserve System (the “Board”), the Federal Deposit Insurance Corporation (“FDIC”) and the Office of the Comptroller of the Currency (“OCC”) (collectively, the “Regulators”) – requested public comment on proposed joint guidance regarding banking organizations’ management (..)

Risk 81

Risk Insurance Sales Encryption 81

KnowBe4

FEBRUARY 14, 2023

This means you have a bunch of users that unwittingly follow a set of unusual and unnecessary clicks that they should know better than to follow – something they learn very quickly if they are enrolled in new-school security awareness training. Blog post with links: [link] Are Your Users Making Risky Security Mistakes? You're not alone.

Phishing 84

Phishing Security awareness Compliance Risk 84

IBM Big Data Hub

APRIL 24, 2024

Examples of data privacy laws Compliance with relevant regulations is the foundation of many data privacy efforts. Learn how IBM OpenPages Data Privacy Management can improve compliance accuracy and reduce audit time. Examples of data privacy principles and practices Privacy compliance is only the beginning.

Data Privacy 83

Data Privacy Privacy GDPR Personal data 83

Data Matters

APRIL 20, 2021

DOL guidance provides a series of questions that should serve as a starting point for this review and includes topics such as the service provider’s information security standards, track record, cybersecurity insurance coverage, and cybersecurity validation techniques.

Cybersecurity 68

Cybersecurity Insurance Risk Compliance 68

HIPAA

OCTOBER 8, 2013

And, if asked, most dentists and their staff would say they know what the HIPAA regulations are, and yes, they have been trained, but are they really up to date with HIPAA’s ever expanding changes and compliance requirements? It requires a continual effort on the part of the dentist and the office staff.

Compliance 31

Compliance Privacy Insurance Education 31

HIPAA

OCTOBER 8, 2013

And, if asked, most dentists and their staff would say they know what the HIPAA regulations are, and yes, they have been trained, but are they really up to date with HIPAA’s ever expanding changes and compliance requirements? It requires a continual effort on the part of the dentist and the office staff.

Compliance 28

Compliance Privacy Insurance Education 28

HIPAA

OCTOBER 8, 2013

And, if asked, most dentists and their staff would say they know what the HIPAA regulations are, and yes, they have been trained, but are they really up to date with HIPAA’s ever expanding changes and compliance requirements? It requires a continual effort on the part of the dentist and the office staff.

Compliance 28

Compliance Privacy Insurance Education 28

Thales Cloud Protection & Licensing

OCTOBER 5, 2022

Thales is participating in a security session titled “Solutions for Protecting Your Data and Meeting Compliance Using Encryption,” hosted by Il-Sung Lee, Cloud Security at Google, and Sol Cates, Principal Technologist at Thales. On 26 October , we co-host a workshop on cybersecurity insurance with Infinigate. Find more details here.

Cybersecurity 87

Cybersecurity Cloud Digital transformation Sales 87

eSecurity Planet

AUGUST 27, 2021

Also known as vendor risk management (VRM), TPRM goes beyond the general risk management and governance, risk, and compliance (GRC) solutions by specializing in the onboarding, risk assessment, and due diligence for organizations working with third parties. On Gartner Peer Insights, Black Kite holds an average score of 4.7/5 ProcessUnity VRM.

Risk 130

Risk Compliance Marketing Cybersecurity 130

Data Matters

JUNE 24, 2021

On June 15, 2021, the SEC announced settled charges against First American Title Insurance Company (First American) for disclosure controls and procedures violations related to a cybersecurity vulnerability that exposed sensitive customer information. The SEC’s Order provides critical insight for public companies’ disclosure regimes.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

eSecurity Planet

FEBRUARY 11, 2022

The simplest example may be insurance. Life, health, auto, and other insurance are all designed to help a person protect against losses. Maintaining Regulatory Compliance. Also read : Top Governance, Risk, and Compliance (GRC) Tools for 2022. What is Cybersecurity Risk Management? Risk Management Process.

Risk 140

Risk Cybersecurity Encryption Access 140