Regulatory Considerations for Cybersecurity: How to Prepare for the Cybersecurity Section of a Regulatory Exam

Cybersecurity risk has become an important consideration in the risk profile of a company. Frequent front-page news articles highlight external attacks or attempts to access company systems and data. The need for a robust cybersecurity program is a critical and required mitigation strategy for insurance companies of all sizes.

This session addresses the current cybersecurity risk environment, including trends, recent regulations, other regulatory activities, and steps to support compliance. Our presenters discuss recent regulatory developments including the NAIC Model Cybersecurity Law, states that have enacted cybersecurity regulations, and other state activities. We also cover expectations of the state examiners when conducting a financial examination or cybersecurity review.