While your business may not need to comply with a federal regulation, healthcare requirements, or an international standard, it most likely will need to comply with its insurance policy. As threat actor activity increases and breaches increase in size and cost, most insurance companies are not only raising their costs, but also checking your work.
The insurance industry has been hit hard the past few years with the numerous volume of breaches and the requests for payouts. Policy underwriters are now asking harder questions in order to set their carriers up for success. These questions have become more detailed and go beyond the “yes” or “no” necessary responses. The insurance carriers are becoming smarter and more careful with their policies and trying to reduce their occurrence of payouts.
Some of the new requests from insurance companies are:
- How many personal identifiable (PII) records are under management?
- Do you have an end-point detection and response (EDR) service?
- If so, which one?
- Are your business systems compliant with a monitoring solution?
- If so, what do you monitor for?
- Do you have a written vulnerability management program?
- If so, how often are you penetration testing the systems?
Simply saying “yes” is no longer an option. Put the correct controls and systems in place to meet this growing demand for insurance compliance, as well as increasing your cybersecurity posture. ACSM provides a host of various solutions from EDR, SOC/SIEM Monitoring to Forensic retainer, to help meet the newly evolving insurance criteria.
AmericanCSM.com helps its clients by outlining a Secure IT Environment (S.I.T.E.), where a variety of services can be selectively engaged to meet your specific business needs. You can read more about our MSP/MSSP offerings here https://www.americancsm.com/acsm-s-i-t-e-msp-mssp-services/ We can set up an initial discovery meeting to help you map these services to your needs and deliver quick quoting to demonstrate the values of the MSP/MSSP.
ACSM has been helping businesses protect their assets and improve their security and privacy posture since 2006. Our skilled team can help your business understand its cyber weaknesses and potential threats as well as improve your security, privacy, and compliance postures. Our services include penetration testing, maturity assessments, cyber security, and privacy implementation assistance, CISO-as-a-Service, DPO-as-a-Service, and numerous MSP and MSSP services, to mention a few.
To learn more about how ACSM can help support your cyber defense needs, please use our contact page https://www.americancsm.com/contact-us/ and schedule a free consultation call today.