Cyber Insurance – What is Best for Your Business|Podcast Episode # 3

Cyber Security Insurance – 8 coverage options to plan for.

In this episode I talk with John Milano, SR VP of RCMD. I ask him questions on his cyber security insurance business and what an IT Leader needs to be asking from their insurance carrier. We cover every conceivable topic and situation. In addition he has suggested questions that all CIOs and IT and business leaders need to be asking. We discuss limits of coverage and how to buy the best appropriate policy for your business.

If you are an IT Business Leader and want the latest Cyber Insurance information related to:

Security & Privacy Liability, Media Content, Regulatory Acts Coverage, Breach Response Fund,Legal & Forensic Expenses, Cyber Extortion, DDOS and Business Interruption, Business Interruption, Crisis Fund then listen below.

Show Notes

Some of the questions we covered:

1. How is cyber insurance (CI) landscape changing
2. Is Cyber Ins (CI) changing as fast as IT Security?
3. How is data being moved to the cloud impacting Cyber insurance?
4. If a company is multi-national how does this impact CI ?
5. What about state by state limits?
6. What elements of insurance policies should be examined to see what is included?
7. Not all insurance companies play in the Cyber Risk area…..right?
8. What does RCMD bring to the table that buyers should know about?
9. What IT security does a company need to qualify in order to buy cyber insurance?
10. What are the different flavors? Technical E&O, cyber theft, cyber attack/business interruption, data leak/breach, downstream/3rd party attack damage.
11. How do CIO’s prepare for cyber insurance? When its time to make the insurance company pay out, how do CIO’s show due diligence.

Sample Coverages under a Cyber Liability Policy

1.  Security & Privacy Liability
2. Media Content
3. Regulatory Acts Coverage
4. Breach Response Fund
5. Legal & Forensic Expenses
6. Cyber Extortion
7. Business Interruption
8. Crisis Fund

Show Notes for Episode 3

• How do Insurance Carriers assess Risk? [3:34]
• How do Insurance Carriers assess risk which is in the Cloud and data housed in different locations? [5:50]
• What risk identifiers do Insurance Carriers look at, and what does the CIO need to be aware of? [8:10]
• How can insurance help when companies suffer breaches.[11:03]
• Should insurance be a part of BCP -table top planning. [13:59]
• When a breach happens, what would you need to be aware of that would negate your Cyber insurance? [15:12]
• If you move part of your data into a cloud service provider, will it abdicate the customer from responsibility for the security of their data[18:03]
• Data owner is responsible for mis-management of data. [19:00]
• If data breach is in a different location to where client is based, what would happen, and who would it impact? [19:31]
• What are the different types of policy you should be asking for? [21:39]
• What do you need to understand in terms of regulatory policy and what is being qualified. [23:15]
• Upon breach, would the insurance policy help with expenses and costs of notification, credit monitoring, PR & forensics? Can this be put outside your liability limit? [23:41]
• What policies would help with additional forensics [26:20]
• In the Sony Hack they were asked to pay an extortion fee. How do policies deal with cyber extortion? Network Interruption? [27:56]
• What questions should a CIO ask? [29:55]
• Are Insurance carriers covering the difference between how data is moved – through different virtualisation methods BYOD [32:04]
• How do carriers look at HIIPA, PCI regulations? [34:18]
• How can a CIO get counsel in purchasing insurance? [36:23]
• How does coverage help you if you have already been breached and it was undetected, or unknown at the time of purchasing insurance. Assumption of Breach [39:26]
• Do you have to do an assessment before? [42:00]

Love this episode? Leave a Review 

Share it on your LinkedIn feed.

If you haven’t already, please make sure you leave us a review on iTunes.

About Bill Murphy 

Bill Murphy is a world-renowned IT Security Expert dedicated to your success as an IT business leader. 

Connect With Us On Social Media

Connect with Bill on LinkedIn.
Instagram
Twitter
Facebook

Join The CIO Innovation Mastermind Community

We invite the top 20% of Business IT Leaders for my CIO Innovation Mastermind Events group to participate in monthly discussions on things like VR, AI, and other disruptive & emerging technologies. If you want to become a member, email Chief of Staff, Jamie Luber Jluber@redzonetech.net for more information.