Duo's Security Blog

OCTOBER 18, 2021

We need to work with many different teammates on campus — risk management, legal, compliance and institutional review boards, to name a few — to effectively manage cybersecurity risk across our communities. In a recent Duo blog post, we gave an overview of cyber liability insurance.

Insurance 86

Insurance Education Risk Cyber Insurance 86

eSecurity Planet

APRIL 22, 2022

That’s where cyber insurance may be able to help. For that reason, most experts now recognize that a complete cybersecurity strategy not only includes technological solutions aimed at preventing, detecting, and mitigating attacks, it should also include cyber insurance to help manage the associated financial risks.

Cyber Insurance 99

Cyber Insurance Insurance Marketing Small Business 99

SecureWorld News

MAY 26, 2021

New research reveals that a record number of organizations are buying cyber insurance policies as a tool for protecting themselves against cyber risk. However, the cost for those policies is rising dramatically as cyber insurance premiums soar up to 30% vs. the previous year. cyber insurance market.

Cyber Insurance 57

Cyber Insurance Insurance Cyber Risk Marketing 57

The Last Watchdog

JANUARY 30, 2019

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Cyber Risk 147

Cyber Risk Risk Financial Services Banking 147

SC Magazine

MAY 24, 2021

In a report released May 20, the Government Accountability Office looked at how the private cybersecurity insurance market has developed over the past five yearsRich Baich is global chief information security officer for insurance giant AIG. Photo by Spencer Platt/Getty Images).

Cyber Insurance 94

Cyber Insurance Insurance Marketing Cyber Risk 94

SC Magazine

FEBRUARY 8, 2021

Every time a driver buckles up or an airbag is deployed we see the powerful influence of the insurance companies who insisted those measures become mandatory. Now, those insurers are poised to drive cybersecurity investment by insisting that organizations meet certain criteria to qualify for coverage. A maturing model.

Insurance 126

Insurance Cyber Insurance Cybersecurity Government 126

SC Magazine

MAY 19, 2021

The development of cybersecurity insurance has played an important role in determining how companies prepare for and respond to ransomware attacks and the resulting fallout. That in itself has evolved, as insurers and insured learn just how expensive that fallout can be. The ransomware reality check for insurers.

Cyber Insurance 102

Cyber Insurance Insurance Marketing Ransomware 102

The Security Ledger

SEPTEMBER 11, 2019

Third party cyber risk is growing. In this Spotlight Podcast, a companion to our new eBook, Rethinking Third Party Cyber Risk Management, we go deep on the topic of building a mature third party cyber risk program with Dave Stapleton the Director of Assessment. Third party cyber risk is growing.

Cyber Risk 40

Cyber Risk Risk Data privacy Insurance 40

Schneier on Security

FEBRUARY 28, 2024

In the first week of January, the pharmaceutical giant Merck quietly settled its years-long lawsuit over whether or not its property and casualty insurers would cover a $700 million claim filed after the devastating NotPetya cyberattack in 2017. The 9/11 attacks cost insurers and reinsurers $47 billion. 11, 2001, terrorist attacks.

Cyber Insurance 236

Cyber Insurance Insurance Government Cyber Risk 236

SC Magazine

JULY 13, 2021

Malicious cyberattacks caused the majority of these security incidents, accounting for 73% of all breaches. Unauthorized access or disclosure accounted for another 22%, and the remaining 5% were caused by smaller thefts, losses, or improper disposals. More than 22.8 Another 20.7% were attributed to extortion.

Data breaches 113

Data breaches Insurance Healthcare Education 113

SecureWorld News

APRIL 29, 2024

If there is a silver lining, it is likely the data exposed to advertisers such as Microsoft and Google does not include usernames, passwords, Social Security numbers (SSNs), financial account information, or credit card numbers. Protecting your information online starts with good cyber hygiene.

Data breaches 86

Data breaches Healthcare Identity Theft Advertising 86

Security Boulevard

AUGUST 22, 2022

Even with ransomware costing billions of dollars in losses and cyber insurance claims, organizations are still impacted beyond the checkbook. These attacks have driven the cost of cyber insurance premiums higher. Cyber insurance has become more critical to organizations to help offset the risk to the company.

Cybersecurity 98

Cybersecurity Cyber Insurance Insurance CISO 98

CyberSecurity Insiders

MARCH 25, 2021

Department for Digital, Culture, Media and Sport (DCMS) of UK conducted the survey and came to the above stated conclusion that shows how relaxed are businesses for cyber security. And sometimes cyber criminals are using email services to trick employees into making fraudulently large financial transfers via new business deals or contracts.

Cyber threats 128

Cyber threats Cyber Insurance Insurance Cyber Risk 128

SecureWorld News

NOVEMBER 30, 2021

M&A cyber risk is real. The information accessed includes full names, credit and debit card numbers with CCV, financial account numbers, and platform account numbers. What kind of cyber risks are lurking in the organizations you are acquiring or merging with? What it did not know at the time?

Data breaches 82

Data breaches Insurance Cyber Risk Risk 82

The Last Watchdog

DECEMBER 5, 2018

The compromised databases included names, addresses, dates of birth, insurance policy details, medical record numbers, account balances and dates of service — of both guarantors and patients. The fact that this incident is being labeled “the Atrium breach” in the media also shows where the reputational risk lies.

Data breaches 153

Data breaches Healthcare Insurance Risk 153

Joseph Steinberg

APRIL 20, 2021

Hospitals, medical clinics, labs, pharmacies, insurance companies, and others involved in the vaccination process often require people who want to be vaccinated to share large amounts of both medical and demographic data in order to register for vaccine appointments. Provide as little information as possible to vaccinators.

Healthcare 165

Healthcare Insurance Computers and Electronics Data collection 165

NetSpi Executives

OCTOBER 17, 2023

This includes the provision of post-market updates and patches, addressing known unacceptable vulnerabilities on a reasonable schedule and addressing critical vulnerabilities that could pose uncontrolled risks as soon as they are discovered. They task the Government Accountability Office (GAO) with preparing reports and conducting reviews.

Healthcare 94

Healthcare Manufacturing Cyber Risk Cybersecurity 94

SC Magazine

MAY 28, 2021

That distinction is important for identifying risk. While the Oldsmar, Florida hack, for example, shined a light on risks associated with remote access to industrial control systems, Colonial Pipeline exposed IT system vulnerabilities that could exist in any sector. They need to come together somehow.

Insurance 117

Insurance Government Ransomware Risk 117

The Security Ledger

JULY 22, 2020

In this Spotlight podcast* we’re joined by Andrew Jaquith, the CISO at QOMPLX to talk about how the COVID pandemic is highlighting longstanding problems with cyber risk management and cyber resilience. Episode 107: What’s Hot at Black Hat & does DHS need its new Risk Management Center? Read the whole entry. »

CISO 52

CISO Cyber Risk Ransomware Risk 52

BH Consulting

JANUARY 11, 2022

We begin with a look at a contentious topic: cyber risk insurance. The blog was inspired by the growing number of organisations coming under pressure to take out insurance cover. Risk vs reward. There is an argument that cybersecurity insurance is useful because it makes people think of business risk, not just IT.

Cybersecurity 59

Cybersecurity Insurance Scams Cyber Risk 59

Spinone

DECEMBER 26, 2018

In this article we will learn how to address and effectively respond to major enterprise cybersecurity threats and provide tips to mitigate IT security risk. Be On Your Guard with the Most Treacherous Insider Roles A paramount priority when addressing the threat is to distinguish the fundamental insider risks.

Security Awareness 40

Security Awareness Risk Cyber threats Cyber Risk 40

Centraleyes

NOVEMBER 5, 2023

HIPAA, or the Health Insurance Portability and Accountability Act of 1996, is a federal law, whereas HITRUST is a comprehensive control framework. ” HIPAA: An Overview HIPAA, short for the Health Insurance Portability and Accountability Act, is a pivotal U.S. HITRUST provides measurable criteria and objectives.

Healthcare 52

Healthcare Risk Insurance Penetration Testing 52

SecureWorld News

AUGUST 23, 2023

For a solid rundown of what the updates mean, check out this SecureWorld article from Kip Boyle , vCISO, Cyber Risk Opportunities LLC. particularly the greater emphasis on governance and cybersecurity risk management and the implementation examples provided at the subcategory level. 19, Detroit on Sept. and all over the world.

Cybersecurity 77

Cybersecurity CISO Government Risk 77

SC Magazine

JULY 9, 2021

“The federal government has always been ready as a responder, and as a no-cost provider of risk assessment – no changes there.” That would have the effect of breaking the business model of the ransomware gangs and get them to move onto softer targets.” ” Still, even if the U.S. city leadership by surprise.

CISO 80

CISO Government Cryptocurrency Ransomware 80

SC Magazine

APRIL 23, 2021

Richards argues that this rise has a dramatic impact on a company’s risk profile and one reason why security ratings scores are not always useful. And, because of this, cyber insurance companies using these scores rely on an inaccurate assessment of target-company risk. FBI CreativeCommons CC PDM 1.0. Usually not.

Cyber Insurance 61

Cyber Insurance Insurance Risk Cyber Risk 61

Thales Cloud Protection & Licensing

JUNE 15, 2023

By using a cloud-based KMaaS provider, organizations can centralize and automate their key lifecycle management, reducing the risk of inconsistent policies or compromised keys. Reduce business threats Key Management as a Service can help organizations reduce cyber risks and address various threats to business and data security.

Encryption 133

Encryption Data breaches Authentication Risk 133

Security Affairs

NOVEMBER 14, 2022

Are the directors of a company hit by a cyberattack liable for negligence in failing to take steps to limit the risk. As the risk of a cyberattack grows, it is pivotal to consider whether the directors of a company hit by a ransomware attack, for example, can bear any liability for negligence in failing to take steps to limit the risk.

Cyber Risk 119

Cyber Risk Insurance Cyber Attacks Risk 119

The Security Ledger

JUNE 24, 2021

In just the past four months, the United States has contended with a major escalation of cyber risk in critical infrastructure with two, major attacks that disrupted critical sectors. Episode 158: How NotPetya has Insurers grappling with Systemic Cyber Risk. The repercussions of those attacks were easy to see.

Cyber Risk 52

Cyber Risk Risk Cyber Attacks Ransomware 52

SC Magazine

JULY 1, 2021

But even advanced tools can’t tell you who owns it – or what it means to the organization in terms of risk.”. Sehgal noted there’s also an imbalance in terms of understanding the risk devices pose to the enterprise itself, as well as overall patient safety and clinical risks. And there are many tools that can accomplish that.

Security Awareness 68

Security Awareness IoT Risk Healthcare 68

Centraleyes

JANUARY 14, 2024

However, every partnership you make introduces a degree of risk that must be accounted for. Examples include: Privacy concerns Digital security Business continuity Regulatory compliance Physical security Risk is a hot topic in the business sector. We’ll discuss the details of vendor risk and the ways we can address it.

Risk 52

Risk Cybersecurity Government Insurance 52

The Last Watchdog

DECEMBER 12, 2023

Related: Adopting an assume-breach mindset With that in mind, Last Watchdog invited the cybersecurity experts we’ve worked with this past year for their perspectives on two questions that all company leaders should have top of mind: •What should be my biggest takeaway from 2023, with respect to mitigating cyber risks at my organization?

Cybersecurity 258

Cybersecurity Social Engineering Cyber threats Software 258

SecureWorld News

OCTOBER 11, 2023

Before that, I worked as a full-time CISO for an insurance company for seven years. And each one of these companies has its own vendor risk management program. And the AWS risk management people speak in a language, filled with jargon, Jeff has never heard before. Who's his customer? Amazon Web Services (AWS).

Insurance 91

Insurance Passwords CISO Cybersecurity 91

SecureWorld News

JULY 31, 2023

If you are a CISO today who is not getting face time with the board, look at this as an opportunity to continue to press for the need to discuss the current state and cyber risks currently being faced by the company. What about providing D&O (directors and officers liability) insurance to CISOs? That's not addressed either."

CISO 87

CISO InfoSec Risk Cybersecurity 87

Centraleyes

APRIL 1, 2024

Governance, Risk, and Compliance (GRC) platforms help organizations optimize their governance strategies, streamline risk management processes, and ensure compliance with regulatory requirements. now including governance as a core function of cyber GRC and risk management.

Risk 52

Risk Government Artificial Intelligence Software 52

eSecurity Planet

MARCH 17, 2023

From there, these tools send alerts to security teams if and when risks are identified. Vulnerability management is handled not only by cybersecurity and IT teams but by cross-functional teams that understand how assets are used across the organization.

Network Security 113

Network Security Penetration Testing Firewall Antivirus 113

The Last Watchdog

JUNE 1, 2020

Enterprise risk management (ERM) is a comparatively new corporate discipline. The basic notion is that in today’s complex operating environment, it is important for businesses to proactively identify operational hazards and have a plan in place to account for them. I had the chance to drill down on this with Clinton.

Cyber Risk 199

Cyber Risk Risk Insurance Cybersecurity 199

Jane Frankland

DECEMBER 7, 2023

Critical infrastructure, such as energy grids and transportation systems, will be targeted, posing risks to national security and economic stability. Geopolitical tensions also foster information warfare and cyber espionage, compromising the security of governments, businesses, and individuals. The first is by rule making.

Cybersecurity 130

Cybersecurity Cyber threats Insurance Artificial Intelligence 130