Who is going to be the first insurance company fined under the Insurance Data Security Model Act?

John Blackshire
Aug 3, 2021
1 min read

Updated: Oct 5, 2021

We all know that:

Cyber risks are evolving at an accelerating rate,
Most Insurance Departments now have established in law or by regulation the Data Security Program requirements,
Data Security Programs have to continue to evolve and mature,
The most important internal controls are contained within corporate governance and enterprise risk management.

Does anyone have an example of an insurance commissioner taking an enforcement action under this

NAIC Information Security Programs Cybersecurity training and Internal Controls training — How good does your Information Security program stake up to the NAIC Model Information Security Act.

Recent Posts

See All

What Should TUSD's Objectives Be?

COSO divides objectives into three broad categories: Operations — Reporting — Compliance For TUSD, I would establish 12 enterprise-level objectives beneath those categories. The key principle is: Obje

How Mature Is Your Control Environment? A Better Way to Measure the Foundation of Internal Control

Organizations frequently ask Internal Audit a deceptively simple question: “Are our internal controls effective?” There is another question that may tell management and the Audit Committee considerabl

ICFR Problems: What SEC-Registered Companies Keep Getting Wrong

For more than two decades, public companies have been required to take Internal Control over Financial Reporting (ICFR) seriously. Yet material weaknesses continue to appear in SEC filings, financial

Who is going to be the first insurance company fined under the Insurance Data Security Model Act?

Recent Posts

Comments

Subscribe Form