In October 2017, the National Association of Insurance Commissioners (NAIC) adopted the Insurance Data Security Model Bill, also known as the NAIC “Model Law.”
NAIC’s Model Law seeks to establish a guiding framework that provides actionable expectations to regulated entities so they can develop and establish the operation of a comprehensive cybersecurity program. Among many other things, the Model Law requires 1.) planned cybersecurity testing, 2.) board-level involvement with a company’s information security program and 3.) incident response plans for specific breach notification procedures.
In a recent article published by Insurance Journal, A&M Senior Director John deCraen examines the background and enforcement of this piece of cybersecurity legislation, and discusses the significance of South Carolina serving as the first state to adopt it.
Click here to read the full article >
Learn How To Build Cyber Resiliency for Your Business
December 7, 2021
In a recent Information Security Media Group (ISMG)’s video interview, A&M cybersecurity expert Rocco Grillo, along with Steve Wallstedt, CISO of ABN AMRO Bank and Greg Kyrytschenko, Deputy CISO of Guardian Life, provide best practices for building cyber resiliency.
Securing the post-COVID work environment
November 6, 2020
As part of Cybersecurity Awareness Month, Managing Director Rocco Grillo and Global Deputy CIO of Zoom Technology, Gary Sorrentino, discuss the challenges around securing the work environment in the post-COVID era, including how to confront the expanded threat cyber landscape and how to empower people to be more cyber aware at home and in the office.
Fraud & Cyber Risk in the COVID-19 Era
August 26, 2020
As organization’s and individual’s digital footprints continue to expand, so does the overall cyber threat landscape.
Faces of Fraud 2020: COVID-19's Impact
April 15, 2020
A&M Managing Director Rocco Grillo participated in an Information Security Media Group (ISMG) video panel discussion on “Detecting and Defending Against Emerging Threats” discussing how social engineering, including phishing and fraud scams have increased as a result of the COVID-19 pandemic.