Ransomware Days = the New Snow Days 

The Des Moines, Iowa school system has called in its (unnamed) cyber insurer, the FBI and DHS after an apparent ransomware attack, which put 30,000 students out of school for two days. While many students were doubtless thrilled to be at home with no access to online learning, the school district is responding as if … Read more

New Biden Cybersecurity Plan Will Push Regulations, Address 3rd Party Liability: WaPo 

The Biden Administration plans to release a national strategy that will introduce comprehensive cybersecurity regulation of the US’s critical infrastructure, acknowledging that voluntary efforts have not been sufficient in protecting against cyberattacks. Officials have stated that the new strategy will include expanded requirements for private companies operating in critical sectors. This marks the first time … Read more

Keeping the Lights On: Feds Try to Get Ahead of Threats to the Grid as Cyber Insurance Premiums Jump 

Focus on cybersecurity for the grid was growing even before criminals attacked Washington and North Carolina substations in December. “The Federal Energy Regulatory Commission is considering developing new cybersecurity rules for DERs (Distrubuted Energy Resources) on the bulk electric system and DOE (Department of Energy) is directing millions to support ‘next-generation’ cybersecurity research, development…” “…The … Read more

The Most Challenging Part of Cyber Insurance Underwriting: Business Interruption? 

We recently wrote about the business interruption (BI) risk from DDoS attacks. Now @CAC_Specialty discusses 5 important elements of BI coverage. “1) Waiting Period Length Prior to the hard market, waiting periods may have been as low as 8 to 10 hours for most insureds, whereas with the hard market conditions of 2021, some carriers … Read more

×