Hunton Privacy

JUNE 9, 2022

515 , making Vermont the twenty-first state to enact legislation based on the National Association of Insurance Commissioners Insurance Data Security Model Law (“MDL-668”). On May 27, 2022, Vermont Governor Phil Scott signed H.515 Information Security Program Requirements.

Insurance 107

Insurance Security Information Security Cybersecurity 107

Krebs on Security

JUNE 18, 2021

NYSE:FAF ] was leaking more than 800 million documents — many containing sensitive financial data — related to real estate transactions dating back 16 years. If you bought or sold a property in the last two decades or so, chances are decent that you also gave loads of personal and financial documents to First American.

Insurance 272

Insurance Risk Financial Services Mining 272

AIIM

JUNE 23, 2020

Automation can help banks lower loan processing costs, shorten cycle times, unlock visibility, and lower compliance risk. mortgage firm fundamentally transform the way mortgage insurance applications are processed, eliminating paper in favor of a completely digital workflow. But, what does this digital transformation look like?

Insurance 117

Insurance Digital transformation Paper Libraries 117

IBM Big Data Hub

DECEMBER 8, 2023

.” This same sentiment can be true when it comes to a successful risk mitigation plan. The only way for effective risk reduction is for an organization to use a step-by-step risk mitigation strategy to sort and manage risk, ensuring the organization has a business continuity plan in place for unexpected events.

Risk 74

Risk Compliance Insurance IT 74

IT Governance

OCTOBER 11, 2022

That’s a problem when cyber risks are constantly evolving, as is the way your organisation operates. It’s why organisations must manage the risks they face with continual evaluation, maintenance and revision. Managing cyber security risks requires a more intensive approach than simply implementing basic protections.

Risk 124

Risk GDPR Information Security Personal data 124

IT Governance

JULY 15, 2019

Cyber insurance is big business these days. Damages incurred by information security incidents generally aren’t covered in commercial insurance policies, so a specific policy is necessary to help cover the costs of things like forensic investigation, incident response and notification procedures. Document an incident response plan.

Insurance 89

Insurance Data breaches Risk Information Security 89

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550. MCL § 500.550.

Insurance 68

Insurance Security Cybersecurity FOIA 68

eDiscovery Law

JULY 12, 2021

Key Insight: Plaintiff’s Motion to Compel sought missing documents and communications from, and the correction of metadata “issues” from Defendant and its parent company (via third party subpoena), and sought an award of attorney’s fees and costs.

Insurance 40

Insurance Metadata Risk Communications 40

Hunton Privacy

JULY 16, 2021

The Proposed Guidance seeks to promote consistency in banking organizations’ third-party risk management, replacing agency-specific guidance with a framework that applies to all banking organizations supervised by the Regulators.

Risk 81

Risk Insurance Sales Encryption 81

eSecurity Planet

AUGUST 27, 2021

In a developing market, third-party risk management (TPRM) software and tools could be the answer to helping organizations fill the gap. This article looks at the top third-party risk management vendors and tools and offers a look into TPRM solutions and what buyers should consider before purchasing. Aravo TPRM.

Risk 130

Risk Compliance Marketing Cybersecurity 130

Hunton Privacy

FEBRUARY 29, 2024

The resolution agreement requires Green Ridge to pay $40,000 to OCR and enter into a Corrective Action Plan that obligates Green Ridge to, among other items: Implement a security management process, including a thorough risk analysis, which is to be provided to HHS for review within 60 days.

Ransomware 111

Ransomware Personal data Risk Privacy 111

IBM Big Data Hub

NOVEMBER 30, 2023

Risks from wildfires, floods, heat, drought and wind have always been a concern, but climate change has intensified these risks, making them more frequent and unpredictable for organizations. For instance, proactively identify high-risk assets and develop a contingency plan. What can organizations do about climate change?

Energy and Utilities 96

Energy and Utilities Insurance Risk Retail 96

IT Governance

MAY 3, 2019

An RTP (risk treatment plan) is an essential part of an organisation’s ISO 27001 implementation process, as it documents the way your organisation will respond to identified threats. What are your risk treatment options? What are your risk treatment options? Avoid the risk by ceasing any activity that creates it.

Risk 72

Risk Information Security Communications Insurance 72

The Last Watchdog

JANUARY 30, 2019

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Risk 147

Risk Financial Services Insurance Cybersecurity 147

Everteam

JULY 22, 2020

ICAWOOD Chooses Everteam’s “Fidji” Cloud-based Document Management System for its Real Estate Assets. Indeed, the standard inclusion of the “business” classification scheme ( Fiji ) in the application allows ICAWOOD to use the Fiji document typologies to classify and “type” the stored information.

Cloud 52

Cloud Information governance IT Artificial Intelligence 52

Security Affairs

NOVEMBER 17, 2023

We took certain systems offline to investigate this activity and to reduce risk, and have also begun working with law enforcement.” TFS offers various financial products, including auto loans, leases, and insurance solutions. ” reads a statement published by the company.

Financial Services 120

Financial Services Ransomware Data breaches Insurance 120

Security Affairs

DECEMBER 11, 2023

TFS offers various financial products, including auto loans, leases, and insurance solutions. Leaked sample data includes financial documents, invoices, hashed account passwords, passport scans, and more. The documents are in German, a circumstance that suggests that they have been stolen from company systems located in Germany.

Financial Services 110

Financial Services Data breaches Ransomware Insurance 110

Hunton Privacy

NOVEMBER 13, 2023

DMS is a HIPAA business associate (“BA”) that provides payer credentialing and medical billing services to HIPAA Covered Entities (“CEs”). As a result, the electronic protected health information (“ePHI”) of approximately 206,695 individuals was affected.

Ransomware 72

Ransomware Risk Insurance Encryption 72

Data Matters

SEPTEMBER 7, 2022

The National Association of Insurance Commissioners (NAIC) held its Summer 2022 National Meeting (Summer Meeting) August 9–13, 2022. The Privacy Working Group has been reviewing state insurance privacy protections regarding the collection, ownership, use, and disclosure of information gathered in connection with insurance transactions.

Insurance 78

Insurance Paper Privacy Risk 78

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. It includes multi-disciplinary risk and compliance management solutions and tools, including: IT & security risk management. Audit management.

Compliance 57

Compliance Risk Government Retail 57

AIIM

AUGUST 19, 2021

Despite the proven operational improvements to be gain by going paperless, paper is still prevalent in too many core business processes today including loan applications, insurance claims, and customer onboarding. Reduced Business Risks: A fully digital environment allows you to work not only faster, but also safer.

Paper 210

Paper ECM Digital transformation Insurance 210

Security Affairs

FEBRUARY 26, 2021

Inova is an actuarial consultancy company, which means they compile statistical analysis and calculate insurance risks and premiums. After further investigation, we have concluded that these documents belonged to people injured or deceased in traffic accidents.

Data breaches 94

Data breaches Insurance Paper Access 94

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Data Matters

SEPTEMBER 20, 2021

The National Association of Insurance Commissioners (NAIC) held its Summer 2021 National Meeting (Summer Meeting) August 14-17, 2021. Highlights include, among others, adoption of revised risk-based capital bond factors for life insurers, amendments to SSAP No. The changes are effective December 31, 2021.

Insurance 88

Insurance e-Delivery Paper Sales 88

Hunton Privacy

JUNE 13, 2023

On June 6, 2023, the Federal Deposit Insurance Corporation (“FDIC”), the Board of Governors of the Federal Reserve System (“FRB”) and the Office of the Comptroller of the Currency (“OCC”) issued their final Interagency Guidance on Third-Party Relationships (“Guidance”).

Risk 64

Risk Insurance Compliance Information Security 64

Info Source

JUNE 7, 2023

Contact Bryant for a sample copy of DIR (The Document Imaging Report) and/or subscription details. Fresneda: The biggest one, at least in the United States right now, is clearly insurance. There are so many different document types and unstructured content in the industry. That’s a lot of documentation going back and forth.

Insurance 52

Insurance Marketing Customer Experience Compliance 52

Hunton Privacy

AUGUST 10, 2022

NIST issued the updated draft guidance to align it with other NIST cybersecurity guidance documents that have been published since the original HIPAA Security Rule guidance was issued in 2008. The draft guidance does not provide a checklist for HIPAA regulated entities to follow, but rather aims to improve risk management surrounding ePHI.

Security 64

Security Insurance Cybersecurity Risk 64

Data Matters

AUGUST 19, 2020

On July 21, 2020, the New York State Department of Financial Services (NYDFS or the Department) issued a statement of charges and notice of hearing (the Statement) against First American Title Insurance Company (First American) for violations of the Department’s Cybersecurity Requirements for Financial Services Companies, 23 N.Y.C.R.R.

Financial Services 68

Financial Services Cybersecurity Insurance Risk 68

Armstrong Archives

DECEMBER 19, 2023

Everything from tax documents to employee files to bank statements must be kept on file, often for years at a time. At Armstrong Archives , we’re proud to stand at the forefront of records management, offering expert guidance in record retention policy and document management, ensuring that our clients stay compliant and efficient.

Compliance 52

Compliance Archiving Digital transformation Sales 52

Data Protection Report

OCTOBER 3, 2021

The amendment: Expands the definition of “personal information”; Shortens the notification deadline after discovery of a breach from 90 to 60 days; Removes the requirement to consult with law enforcement as part of a risk assessment; Deems compliant any person subject to and in compliance with HIPAA and HITECH; and.

Data breaches 142

Data breaches IT Insurance Passwords 142

Krebs on Security

DECEMBER 8, 2022

The intercepted CLOP communication seen by KrebsOnSecurity shows the group bragged about twice having success infiltrating new victims in the healthcare industry by sending them infected files disguised as ultrasound images or other medical documents for a patient seeking a remote consultation. Encrypting sensitive data wherever possible.

Ransomware 258

Ransomware Metadata Insurance Encryption 258

Data Matters

SEPTEMBER 3, 2020

The National Association of Insurance Commissioners (NAIC) held its Summer 2020 National Meeting (Summer Meeting) from July 27 to August 14, 2020. Annuity Suitability Working Group Drafting FAQ Document to Facilitate Uniformity in State Adoption of Revised Suitability in Annuity Transactions Model Regulation.

Insurance 68

Insurance Paper Artificial Intelligence Big data 68

The Security Ledger

SEPTEMBER 11, 2019

Third party cyber risk is growing. In this Spotlight Podcast, a companion to our new eBook, Rethinking Third Party Cyber Risk Management, we go deep on the topic of building a mature third party cyber risk program with Dave Stapleton the Director of Assessment. » Related Stories Third Party Cyber Risk is growing.

Risk 40

Risk GDPR Data Privacy Personal data 40

Security Affairs

OCTOBER 1, 2023

Immediately after detecting the intrusion, the company launched an investigation with the help of leading third-party cybersecurity experts and is also coordinating with its insurers. The investigation is still ongoing and aims at determining the scope of the incident. ” reads the article published by CNN.

Ransomware 125

Ransomware Insurance Cybersecurity Encryption 125

IT Governance

MAY 16, 2019

There are 46 standards in total in the series (although only a few apply to every organisation), of which ISO 27005 , the risk management standard, is arguably the most important and easiest to get wrong. What is risk management? Assessing these risks helps inform your decision about the best way to reduce risk to an acceptable level.

Risk 67

Risk Information Security Insurance Security 67

IT Governance

MARCH 20, 2024

A 2022 Proofpoint study found that 76% of UK board members believed their organisation to be at risk of a material cyber attack in the next 12 months – higher than the global average of 65%. They usually also provide guidance on how to remediate them, and assign a risk rating to each vulnerability, so you can prioritise accordingly.

Security 116

Security Data breaches Government Insurance 116

Krebs on Security

JULY 27, 2020

. “The ferocity of cyber criminals to take advantage of COVID-19 uncertainties by preying on small businesses is disturbing,” said Andrew LaMarca , who leads the global high-risk and fraud team at Dun & Bradstreet. Another team member works on revising the business documents and registering them on various sites.

Energy and Utilities 354

Energy and Utilities Computer and Electronics Insurance Risk 354