Eversheds Sutherland Cybersecurity and Privacy Insights Blog
content top

NAIC Amps Up Cybersecurity Oversight

The NAIC has begun its efforts to amp up state insurance department oversight of cybersecurity practices with the release of two documents for public comment. The first, entitled Principles for Effective Cybersecurity Insurance Regulatory Guidance, is a document listing 18 principles for effective regulatory guidance regarding the protection of the insurance sector’s data security and...

NIST Releases Draft Framework for Cyber-Physical Systems

The Cyber-Physical Systems Public Working Group (CPS PWG), an open public forum established by the National Institute of Standards and Technology, recently released a preliminary discussion draft of its Framework for Cyber-Physical Systems (CPS Framework). CPS relate to engineered systems involving the integration of cyber and physical components, such as medical devices, aerospace...

CFTC Staff to Hold Public Roundtable on Cybersecurity and System Safeguards Testing

On March 18, 2015, from 9:00 AM – 5:00 PM, the Commodity Futures Trading Commission (CFTC) staff will hold a Public Roundtable on Cybersecurity and System Safeguards Testing. The Roundtable will be divided into four panel discussions focusing on: (i) the need for testing in the current cybersecurity environment; (ii) vulnerability and penetration testing; (iii) key controls testing;...

Crunching the Numbers in NYDFS’ Cybersecurity Report

On February 9, the New York Department of Financial Services was the first insurance regulator to address cybersecurity when it issued its Report on Cyber Security in the Insurance Sector that summarizes the results of a survey completed by 43 insurers about their cybersecurity programs, costs and future plans. In their article for Law360, Sutherland Partners Mary Jane Wilson-Bilik and...

Anthem’s Data Breach Affects Many Non-Anthem Plans: What Employers Need to Know Now

On February 4, 2015, Anthem Inc. disclosed that it had been a victim of a sophisticated cyberattack that compromised the personal health plan data of up to 80 million customers of not only Anthem but also a much broader group of insurers and third-party administrators for whom Anthem did back-office work. View the full Legal Alert.

« Older Entries Next Entries »