Data Matters

JUNE 23, 2022

Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. The post Kentucky and Maryland Recently Joined Other States in Adopting NAIC Model Data Security Law.

Insurance 103

Insurance Security Cybersecurity Information Security 103

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550.

Insurance 68

Insurance Security Cybersecurity FOIA 68

Thales Cloud Protection & Licensing

NOVEMBER 9, 2021

Evolution of Cloud Security: From Shared Responsibility to Shared Fate. These were just some of the major facets of cloud transformation that are creating challenges for data security that I discussed with Sunil Potti, Vice President and General Manager, Google Cloud in a recent Thales Security Sessions podcast moderated by Neira Jones.

Cloud 123

Cloud Security Encryption Insurance 123

eSecurity Planet

AUGUST 9, 2022

Regulatory compliance and data privacy issues have long been an IT security nightmare. GDPR (among other legal requirements in the EU and elsewhere) can expose multinational organizations to hefty financial penalties, additional rules for disclosing data breaches, and increased scrutiny of the adequacy of their data security.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

eSecurity Planet

JANUARY 12, 2021

Protecting your organization from IT security risks is an ongoing, fluid task. Proactively identifying, mitigating and remediating security threats is one of the biggest challenges today’s global businesses face. Components of Security Risk Assessments. Encryption strength. Password protocols. Data backups.

Risk 70

Risk Security Cybersecurity Compliance 70

Data Matters

JULY 30, 2018

In October 2017, the National Association of Insurance Commissioners (NAIC) adopted an Insurance Data Security Model Law. On May 3, 2018, South Carolina became the first state to enact this Model Law, in the form of the South Carolina Insurance Data Security Act (H.B.

Insurance 60

Insurance Security Cybersecurity Data breaches 60

Hunton Privacy

FEBRUARY 25, 2021

As reported on the Hunton Insurance Recovery blog , on February 4, 2021, the New York Department of Financial Services (“NYDFS”), which regulates the business of insurance in New York, has issued guidelines, in the Insurance Circular Letter No.

Insurance 70

Insurance Cybersecurity Risk Education 70

IT Governance

JULY 15, 2019

Cyber insurance is big business these days. Damages incurred by information security incidents generally aren’t covered in commercial insurance policies, so a specific policy is necessary to help cover the costs of things like forensic investigation, incident response and notification procedures.

Insurance 89

Insurance Data breaches Risk Information Security 89

Thales Cloud Protection & Licensing

JANUARY 16, 2024

Such outsourcing of ICT services also requires a clear definition of responsibilities, risks and mitigation between financial entities and ICT third-party service providers. That includes banks, insurances, payment institutions, stock market, and many financial management firms (trading, crypt-assets, etc). What is the scope of DORA?

Financial Services 83

Financial Services Cloud Cybersecurity Encryption 83

Hunton Privacy

JANUARY 2, 2019

New cybersecurity rules for insurance companies licensed in South Carolina are set to take effect in part on January 1, 2019. The new law is the first in the United States to be enacted based on the data security model law drafted by the National Association of Insurance Commissioners.

Insurance 77

Insurance Cybersecurity Data breaches Encryption 77

eSecurity Planet

OCTOBER 18, 2022

However, even with the best planning, organizations can find a few users, machines, or systems that were overlooked or whose backup may be corrupted or encrypted. First, call the cyber insurance company that issued the organization’s cybersecurity policy. Insured companies often will not have options. Eliminate attacker access.

Ransomware 143

Ransomware Encryption Insurance Access 143

eSecurity Planet

AUGUST 27, 2021

Cyberattacks caused by supply chain vulnerabilities mean organizations need a renewed perspective on how to address third-party security. In a developing market, third-party risk management (TPRM) software and tools could be the answer to helping organizations fill the gap. Best Third-Party Risk Management (TPRM) Tools.

Risk 130

Risk Compliance Marketing Cybersecurity 130

Hunton Privacy

JULY 16, 2021

The Proposed Guidance seeks to promote consistency in banking organizations’ third-party risk management, replacing agency-specific guidance with a framework that applies to all banking organizations supervised by the Regulators.

Risk 81

Risk Insurance Sales Encryption 81

Krebs on Security

DECEMBER 8, 2022

Alex Holden is founder of Hold Security , a Milwaukee-based cybersecurity firm. First spotted in mid-August 2022 , Venus is known for hacking into victims’ publicly-exposed Remote Desktop services to encrypt Windows devices. Encrypting sensitive data wherever possible. “ Cl0p ” a.k.a. healthcare organizations.

Ransomware 261

Ransomware Metadata Insurance Encryption 261

Thales Cloud Protection & Licensing

JUNE 15, 2023

A Guide to Key Management as a Service madhav Thu, 06/15/2023 - 11:29 As companies adopt a cloud-first strategy and high-profile breaches hit the headlines, securing sensitive data has become a paramount business concern. The most effective way to ensure data security is through encryption and proper key management.

Encryption 133

Encryption Compliance Cloud Authentication 133

Thales Cloud Protection & Licensing

DECEMBER 22, 2020

Cross-Border Data Privacy and Security Concerns in the Dawn of Quantum Computing. New EU restrictions could force companies to change data transfer practices and adopt more advanced data encryption methods. In recent years, costly breaches and evolving data security concerns have bubbled up to a board level agenda item.

Data Privacy 118

Data Privacy Privacy Security Encryption 118

Security Affairs

APRIL 30, 2023

Every week the best security articles from Security Affairs are free for you in your email box. A new round of the weekly SecurityAffairs newsletter arrived! Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.

Security 93

Security Ransomware Cybersecurity Authentication 93

Hunton Privacy

NOVEMBER 13, 2023

DMS did not detect the attack until after the ransomware was used to encrypt its files in December 2018. DMS is a HIPAA business associate (“BA”) that provides payer credentialing and medical billing services to HIPAA Covered Entities (“CEs”).

Ransomware 72

Ransomware Risk Insurance Encryption 72

Security Affairs

OCTOBER 1, 2023

Experts warn that the recent attack on building automation giant Johnson Controls may have exposed data of the Department of Homeland Security (DHS). The company provides HVAC (heating, ventilation, and air conditioning), solutions for building automation, fire and security systems, and components for energy management. “The

Ransomware 131

Ransomware Insurance Cybersecurity Encryption 131

eSecurity Planet

MAY 26, 2023

Confidential computing is a technology and technique that encrypts and stores an organization’s most sensitive data in a secure portion of a computer’s processor — known as the Trusted Execution Environment (TEE) — while it’s processed and in use. How Does Confidential Computing Work?

Encryption 89

Encryption Cloud IoT Blockchain 89

IBM Big Data Hub

APRIL 24, 2024

The app heavily encrypts all user financial data. Deploying privacy protections: The app uses encryption to protect data from cybercriminals and other prying eyes. Learn how organizations can use IBM Guardium® Data Protection software to monitor data wherever it is and enforce security policies in near real time.

Data Privacy 89

Data Privacy Privacy GDPR Personal data 89

Data Matters

AUGUST 27, 2020

Department of Health and Human Services, Office for Civil Rights (“OCR”) has settled three cases related to alleged violations of the Health Insurance Portability and Accountability Act (“HIPAA”), totaling $1,165,000. These settlements underscore OCR’s continued focus on enforcement of the HIPAA Security Rule.

Compliance 68

Compliance Security Risk Encryption 68

The Last Watchdog

OCTOBER 5, 2023

Byron is the founder and editor-in-chief of The Last Watchdog on Privacy & Security. How can companies minimize risks? Regular training and simulations can help reduce risks associated with human errors. Regular training and simulations can help reduce risks associated with human errors.

Cybersecurity 203

Cybersecurity Privacy Cloud IoT 203

IT Governance

MAY 3, 2019

An RTP (risk treatment plan) is an essential part of an organisation’s ISO 27001 implementation process, as it documents the way your organisation will respond to identified threats. What are your risk treatment options? What are your risk treatment options? Avoid the risk by ceasing any activity that creates it.

Risk 72

Risk Information Security Communications Insurance 72

Thales Cloud Protection & Licensing

MAY 9, 2022

This demonstrates that there are still some businesses that have not learned the lessons of the Colonial Pipeline attack and listened to what security experts and the U.S. For example, both directives makes it mandatory for all agencies to deploy multi-factor authentication and encryption. Cyber insurance coverage ramps up.

Insurance 71

Insurance Ransomware Encryption Authentication 71

Armstrong Archives

AUGUST 25, 2023

The Health Insurance Portability and Accountability Act (HIPAA) ensures individuals’ health data protection and privacy. This includes insurance companies, nurses, and doctors. Healthcare has become more interconnected than ever, making it important to protect patients’ sensitive information.

Computer and Electronics 52

Computer and Electronics Insurance Compliance Risk 52

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

eSecurity Planet

DECEMBER 7, 2023

Encryption uses mathematical algorithms to transform and encode data so that only authorized parties can access it. What Encryption Is and How It Relates to Cryptology The science of cryptography studies codes, how to create them, and how to solve them. How Does Encryption Process Data? How Does Encryption Process Data?

Encryption 110

Encryption IT Passwords IoT 110

Schneier on Security

FEBRUARY 28, 2024

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. The 9/11 attacks cost insurers and reinsurers $47 billion. 11, 2001, terrorist attacks.

Insurance 91

Insurance Government Cybersecurity Risk 91

The Last Watchdog

DECEMBER 5, 2018

million patients had significant amounts of PII exposed by the healthcare provider’s third-party billing vendor, AccuDoc Solutions, shows the healthcare sector remains acutely vulnerable to attacks exploiting third-party contractors even as their first-party security posture hardens. In early 2015, health insurer A nthem Inc.

Data breaches 153

Data breaches Insurance Risk Ransomware 153

Thales Cloud Protection & Licensing

APRIL 18, 2023

RSA Conference 2023: Meet Thales Where the World Talks Security! Meet us at Booth #N-5369 for demonstrations on data security, customer and workforce identity, and post quantum cryptography – just to name a few. Security teams must build quantum resilience today to protect their business from emerging risks.

Security 71

Security Digital transformation Privacy Cybersecurity 71

Security Affairs

SEPTEMBER 23, 2023

The City confirmed the security incident and is working to recover from the ransomware attack that impacted its services, including the police department. The command-and-control beacons allowed Royal to prepare the City’s network resources for the May 03, 2023, ransomware encryption attack.” ” continues the report.

Ransomware 110

Ransomware Encryption Systems administration Cybersecurity 110

eSecurity Planet

OCTOBER 5, 2021

Our top managed security service providers (MSSPs) list is also a good place to look for help. Accordingly, Kaspersky offers a wide range of professional services to address a range of security problems, including ransomware prevention and removal. Kaspersky’s key ransomware and security services. DataRecovery. Touchstone.

Ransomware 139

Ransomware Encryption Cybersecurity Insurance 139

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. It includes multi-disciplinary risk and compliance management solutions and tools, including: IT & security risk management. Audit management.

Compliance 57

Compliance Risk Government Retail 57

Hunton Privacy

OCTOBER 15, 2021

The Division of Consumer Affairs alleged that the fertility clinic violated the New Jersey Consumer Fraud Act and the federal Health Insurance Portability and Accountability Act’s (“HIPAA”) Privacy and Security Rules by removing protected health information (“PHI”) safeguards. Neafsey said in a statement regarding the breach.

Data breaches 103

Data breaches Privacy Insurance Information Security 103

Data Matters

FEBRUARY 6, 2019

The stolen information allegedly included names and identifying information, hashed passwords, security questions and answers, family information, Social Security numbers, lab results, health insurance information, doctor’s names, and medical conditions, among other things.

Data breaches 83

Data breaches Computer and Electronics Security Insurance 83

IBM Big Data Hub

JANUARY 22, 2024

The photo will expedite the recovery process and help when filing a police report or a possible claim with your insurance company. Notify the security team Once you’ve disconnected the affected systems, notify your IT security team of the attack. The two most common types of ransomware are screen lockers and encryptors.

Ransomware 117

Ransomware Encryption Analytics Data breaches 117