INSURANCE

Health payers sit under HIPAA; P&C and life carriers sit under state breach notification laws and the NYDFS Part 500 cybersecurity regulation; SOC 2 carries the attestation weight for vendors serving all three. Attention is triggered by a phishing wave that reaches claims handlers, by exposure of policyholder or claims data, or by an ICT vendor incident that interrupts underwriting or claims processing.

/insurance