Data Matters

JANUARY 14, 2019

On December 19, 2018, Ohio adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law. The Act is designed to “establish standards for data security and for the investigation and notification to the Superintendent of Insurance of a cybersecurity event.”.

Insurance 68

Insurance Security Cybersecurity Data breaches 68

IT Governance

JULY 15, 2019

Cyber insurance is big business these days. Damages incurred by information security incidents generally aren’t covered in commercial insurance policies, so a specific policy is necessary to help cover the costs of things like forensic investigation, incident response and notification procedures.

Insurance 89

Insurance Data breaches Risk Information Security 89

Data Matters

JUNE 23, 2022

Kentucky and Maryland recently continued the trend of state insurance departments adopting some version of the National Association of Insurance Commissioners’ (“NAIC”) Insurance Data Security Model Law. Kentucky Governor Andy Beshear signed House Bill 474 into law, and Maryland Governor Larry Hogan signed SB 207.

Insurance 103

Insurance Security Cybersecurity Information Security 103

Data Matters

FEBRUARY 10, 2021

2 announcing a Cyber Insurance Risk Framework (the Framework) that describes industry best practices for New York-regulated property/casualty insurers. According to NYDFS, the incorporation of these practices should be proportionate to each insurer’s size, resources, geographic distribution, and other factors. The Framework.

Insurance 79

Insurance Financial Services Cybersecurity Risk 79

Krebs on Security

APRIL 27, 2023

This misconfigured Salesforce Community site from the state of Vermont was leaking pandemic assistance loan application data, including names, SSNs, email address and bank account information. Unfortunately, I did not receive any responses from government organizations.” As a result, five companies eventually fixed the problem.

Access 286

Access Authentication Information Security Communications 286

Security Affairs

JULY 8, 2019

Government computer systems at La Porte County, Indiana, were shut down after a cyber attack hit them on July 6. On July 6, a cyber attack brought down government computer systems atLa Porte County, Indiana. The post Cyberattack shuts down La Porte County government systems appeared first on Security Affairs.

Government 86

Government Insurance Ransomware Cybersecurity 86

Security Affairs

APRIL 8, 2024

Greylock McKinnon Associates (GMA) provides expert economic analysis and litigation support to a diverse group of domestic and international clients in the legal profession, the business community, and government agencies, including the Department of Justice (DoJ).

Data breaches 108

Data breaches Insurance Cybersecurity Government 108

Security Affairs

MAY 9, 2020

Nigerian cyber gang SilverTerrier, specialized in BEC attacks, used COVID-19 lures in recent attacks on healthcare and government organizations. On March 23 and 24, a third actor tracked as Black Emeka launched a series of attacks using emails disguised as COVID-19 information. ” continues the report.

Government 63

Government Energy and Utilities Insurance Phishing 63

Krebs on Security

JUNE 18, 2021

The SEC says First American derives nearly 92 percent of its revenue from its title insurance segment, earning $7.1 Title insurance protects homebuyers from the prospect of someone contesting their legitimacy as the new homeowner. Title insurance is not mandated by law, but most lenders require it as part of any mortgage transaction.

Insurance 272

Insurance Risk Financial Services Mining 272

Daymark

DECEMBER 5, 2023

On October 30, 2023, the US Securities and Exchange Commission (SEC) announced fraud charges against SolarWinds and its former chief information security officer (CISO), alleging that “ SolarWinds’ public statements about its cybersecurity practices and risks were at odds with its internal assessments.”

Insurance 62

Insurance Cybersecurity Risk Information Security 62

IG Guru

APRIL 16, 2020

Professor Daneil Solove interviews Kimberly Horn about Cyber Insurance and Ransomeware here. The post Ransomware and the Role of Cyber Insurance via Teach Privacy appeared first on IG GURU.

Insurance 53

Insurance Ransomware Privacy Information governance 53

IT Governance

DECEMBER 14, 2021

With organisations’ cyber security requirements becoming more complex and the threat of cyber attacks growing each year, many decision-makers are turning towards cyber security as a service. This approach, also known as managed cyber security, works by outsourcing cyber security to a third party. Get started.

Security 131

Security Insurance Data breaches Information Security 131

Getting Information Done

APRIL 18, 2017

Ultimately, the chief information security officer (CISO) needs to understand the information footprint across systems, determine the value/risk of loss, and protect against cyberattacks through the deployment of control activities, which are commensurate with the value/risk of these information systems.

Government 53

Government Cybersecurity Insurance Information governance 53

Security Affairs

MAY 29, 2023

MCNA Dental is one of the largest US dental care and oral health insurance providers. The security breach exposed the personal information of current or former provider of dental/orthodontic care to members of certain state Medicaid and Children’s Health Insurance Programs, for which MCNA provides dental benefits and services.

Ransomware 85

Ransomware Insurance Data breaches Access 85

Security Affairs

FEBRUARY 12, 2024

The Canadian government is going to ban the tool Flipper Zero because it is abused by crooks to steal vehicles in the country. The Canadian government announced that it plans to ban the tool Flipper Zero , and similar hacking devices, to curb the surge in car thefts. ” reads a statement from the Canadian Government. .

Sales 98

Sales Government Insurance IT 98

Security Affairs

APRIL 4, 2024

. “While the investigation remains ongoing, the impacted personal information identified thus far varies by individual but may have included name, contact information (e.g., email address, phone number), date of birth, social security number, driver’s license or other government identification, financial details (e.g.,

Data breaches 96

Data breaches Insurance Government Security 96

IT Governance

OCTOBER 11, 2022

This process should be embedded within your overall cyber security measures in what experts refer to as cyber defence in depth. The framework consists of five interrelated stages (or ‘layers’) to help organisations manage information security risks across all parts of their business. Why Cyber Insurance is Essential in 2022.

Risk 124

Risk GDPR Information Security Personal data 124

IG Guru

OCTOBER 11, 2019

Insurance broker Marsh has unveiled the inaugural class of cybersecurity products and services receiving a Cyber Catalyst designation that is part of an evaluation program its backers hope will bring greater clarity in the crowded cybersecurity marketplace.

Insurance 40

Insurance Cybersecurity IT Information governance 40

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. Third-party governance. IT governance and security. Privacy governance and management. Insurance & claims management. Riskonnect.

Compliance 57

Compliance Risk Government Retail 57

The Last Watchdog

APRIL 3, 2019

Identity governance and administration, or IGA , has suddenly become a front-burner matter at many enterprises. Related: Identity governance issues in the age of digital transformation. With each identity comes certain entitlements and authorizations, which need to be monitored and governed. Compliance matters.

Digital transformation 140

Digital transformation Insurance Compliance Healthcare 140

eSecurity Planet

AUGUST 9, 2022

But those aren’t the only laws or regulations that affect IT security teams. There are plenty of others to worry anyone with job titles that include terms like “compliance,” “privacy,” and “security,” from CSOs on down. See the Top Governance, Risk and Compliance (GRC) Tools. PIPL Raises the Bar – And the Stakes.

Data Privacy 145

Data Privacy Compliance Privacy Security 145

IG Guru

AUGUST 12, 2021

Rafael is a well-respected Information Governance Professional (IGP), Certified Records Manager (CRM), and Certified Information Privacy Manager (CIPM). Abby is a California trial attorney for State Farm Mutual Automobile Insurance Company. Tomorrow’s Jobs Today is written by Rafael Moscatel and his spouse Abby Moscatel.

Records Management 96

Records Management Information governance Insurance Privacy 96

Security Affairs

FEBRUARY 28, 2024

” Government experts believe that the increase in targeted attacks against the healthcare sector is the response of the group to law enforcement actions against the Blackcat group in early December 2023. municipal governments, defense contractors, and critical infrastructure organizations).” reads the press release. “To

Ransomware 103

Ransomware Government Insurance Manufacturing 103

Security Affairs

DECEMBER 9, 2023

The compromised information varied for each person and could have included: name, contact information, Social Security Number, date of birth, health information, insurance information, and medical identification numbers. Norton Healthcare is offering impacted individuals two years of credit monitoring.

Data breaches 114

Data breaches Ransomware Insurance Access 114

IT Governance

JULY 6, 2020

For example, the report found that: Only 9% of organisations have a documented cyber security policy; Only 10% have cyber insurance; and. Beaming notes that organisations should be taking a strategic, holistic approach to cyber security rather than identifying specific threats and addressing them as they arise.

Information Security 142

Information Security Phishing IoT Insurance 142

IT Governance

JUNE 9, 2022

Organisations that are looking to bolster their information security practices are often advised to certify to Cyber Essentials – and for good reason. The UK government scheme outlines five controls that cover the core data protection components. The service also comes with cyber insurance coverage of up to £500,000.

Security 119

Security Insurance Information Security Data breaches 119

Security Affairs

JANUARY 6, 2024

In December 2023, the law firm announced that it was working out a settlement with class action plaintiffs who said their personal information was compromised in a March 2023 data breach.

Data breaches 103

Data breaches Insurance Access Cybersecurity 103

Hunton Privacy

AUGUST 2, 2021

The safe harbor also applies in cases where the cybersecurity program conforms to applicable state or federal security laws and regulations ( e.g. , the security requirements of the Health Insurance Portability and Accountability Act and the Gramm-Leach Bliley Act).

Cybersecurity 87

Cybersecurity Insurance Military Data Privacy 87

Data Matters

MARCH 26, 2020

cybersecurity and cyber risk insurance issues. Key topics to include: Key cybersecurity risks arising from remote and home working, weakening of information governance controls, and phishing/scams focused on COVID-19 anxieties. Join OneTrust DataGuidance and Sidley for a webinar discussing COVID-19 and European and U.S.

Cybersecurity 74

Cybersecurity Insurance Risk Privacy 74

IT Governance

SEPTEMBER 27, 2022

Cyber Essentials is a UK government-backed framework supported by the NCSC (National Cyber Security Centre). It sets out five basic security controls that, when implemented correctly, can protect organisations from around 80% of common cyber attacks. Why Cyber Insurance is Essential in 2022. How we can help.

Data breaches 119

Data breaches Government Insurance Risk 119

Security Affairs

NOVEMBER 20, 2021

banking regulators this week approved a rule that obliges banks to report any major cybersecurity incidents to the government within 36 hours of discovery. The rule was approved by the Federal Reserve, Federal Deposit Insurance Corporation and Office of the Comptroller of the Currency.

Cybersecurity 119

Cybersecurity Financial Services Insurance Ransomware 119

Security Affairs

FEBRUARY 25, 2024

Iran Crisis Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign U.S.

Military 93

Military Security Ransomware Insurance 93

Data Matters

JUNE 24, 2021

On June 15, 2021, the SEC announced settled charges against First American Title Insurance Company (First American) for disclosure controls and procedures violations related to a cybersecurity vulnerability that exposed sensitive customer information. This resolution highlights the SEC’s continued focus on cybersecurity.

Cybersecurity 68

Cybersecurity Financial Services Risk Compliance 68

IT Governance

FEBRUARY 8, 2018

Of the businesses surveyed, those in the finance and insurance industries had the highest levels of awareness (79%), followed by information and communications (67%) and education (52%). Smaller charities showed less awareness – 47% of small charities (10-49 employees) and 37% of micro charities (2-9 employees) were aware of the GDPR.

GDPR 63

GDPR Government Education Compliance 63

IT Governance

NOVEMBER 6, 2023

When MOVEit was hacked by the Russian Cl0p ransomware gang in May, email addresses and links to government employee surveys were compromised. On 2 September, it confirmed that an unauthorised party had accessed or removed some of its files, some of which contained confidential patient information.

Data Privacy 97

Data Privacy Privacy Libraries Security 97

Information Governance Perspectives

MAY 10, 2020

In May of 2020 I was honored to speak at the MERv conference with John Frost of Box on the topic of Using Information Governance with a Privacy Compliance Plan as the Fulcrum for Data Privacy and Continuous Compliance. Privacy makes data governance ethical and tangible, and compliance leaders understand that.

Compliance 52

Compliance Information governance Privacy Data Privacy 52

Security Affairs

NOVEMBER 12, 2023

The Government organization disclosed a data breach that impacted about 1.3 Compromised data may include the Social Security number (SSN), date of birth, driver’s license/state identification number, and taxpayer identification number. million Teachers Insurance and Annuity Association of America 2.6 million individuals.

Data breaches 107

Data breaches Insurance Education Cybersecurity 107