The Source for Cyber Insurance News, Insights and Data
You’ve got a month-and-a-half to suggest “any potential changes to the [Terrorism Risk Insurance Act] or [Terrorism Risk Insurance Program] that would encourage the take up of insurance for cyber-related losses arising from acts of terrorism as defined under TRIA, including but not limited to the modification of the lines of insurance covered by … Read more
Where reporting requirements exist, lawsuits follow. “The Cyber Incident Reporting Act puts in motion important new cybersecurity reporting requirements that will likely apply to businesses in almost every major sector of the economy, including health care, financial services, energy, transportation and commercial facilities.” Source: Biden Signs Cyber Incident and Reporting Act, Requires Reporting
Insurers have been tightening their war exclusions and clarifying attribution requirements, especially after the recent court win by Merck over reimbursement of its losses from 2017’s NotPetya malware attack. “However, in DBRS Morningstar’s opinion, attribution of cyber warfare remains a challenge because it places the onus on the insurer to demonstrate that a cyber incident … Read more
Move is linked to the Terrorism Risk Insurance Program (TRIP) & potential increased industry role by US Treasury Department. “Treasury is navigating a narrow course between trying to work with insurers to gather data on ransomware payments and warning insurance companies and other financial third parties that they run the risk of violating sanctions by making such … Read more
Our prediction is plenty of wrangling on the definition of “materiality.” “The new requirement applies to any cybersecurity incidents that are expected to materially impact a bank’s ability to provide services, conduct its operations or undermine the stability of the financial sector. The rule was approved by the Federal Reserve, Federal Deposit Insurance Corporation and … Read more