Fed Spending Bill Requires CISA to Evaluate and Report Back re Public-Private Cyber Insurance Working Group 

“Lawmakers also want CISA (Cybersecurity and Infrastructure Security Agency) to report back in 90 days about the feasibility of a public-private ‘cyber insurance and data analysis’ working group and establishing an accreditation program for third-party cybersecurity providers that work with federal agencies, critical infrastructure operators and state and local governments.”

Ransomware Attacks on Iowa Schools Highlight Cyber Insurance Challenges of Local Government 

“(David Fringer, the executive director of information technology at Green Hills Area Education Association) said (cyber insurance) costs for the Council Bluffs school system three years ago when he worked there until June 2020 went from near $15,000 to $30,000 and then as high as $50,000 over a few years.” Another local expert noted that … Read more

APCIA to Feds: Not So Fast with a “Cyber TRIP” 

American Property Casualty Insurance Association’s response to the federal government’s request for comment on cyber insurance issues: “We believe it is premature to explore the details of a federal insurance response without conducting a thorough study of the threshold questions raised above to determine where, if at all, such a response is needed. Nevertheless, experience … Read more

TSA Asks: How Could Cyber Insurance Fit into Regs for Rails and Pipelines? 

You’ve got until Jan. 17th to weigh in. See instructions in the embedded document at the link below. Requested feedback includes: “Address incentivizing cybersecurity adoption and compliance. TSA wrote that it ‘is particularly interested in comments on types of incentives, such as liability protection, insurance, commercial contracts, or other private- or public-sector options, that would … Read more

Are Municipalities Prime Targets for Hackers?

The report concerns a March 2022 attack on the Canadian tourist town of Banff, which apparently cost over $500,000. “Municipalities can be favoured targets of cybersecurity attackers because their cyber defences aren’t as sophisticated as higher levels of government. Attackers believe cities and towns may be more willing to pay ransoms than other organizations because … Read more

×