Krebs on Security

JUNE 18, 2021

NYSE:FAF ] was leaking more than 800 million documents — many containing sensitive financial data — related to real estate transactions dating back 16 years. If you bought or sold a property in the last two decades or so, chances are decent that you also gave loads of personal and financial documents to First American.

Insurance 281

Insurance Risk Financial Services Mining 281

eSecurity Planet

FEBRUARY 11, 2022

Risk management is a concept that has been around as long as companies have had assets to protect. The simplest example may be insurance. Life, health, auto, and other insurance are all designed to help a person protect against losses. What is Cybersecurity Risk Management? Setting Up Your Risk Management System.

Risk 138

Risk Cybersecurity Encryption Access 138

AIIM

JUNE 23, 2020

Automation can help banks lower loan processing costs, shorten cycle times, unlock visibility, and lower compliance risk. mortgage firm fundamentally transform the way mortgage insurance applications are processed, eliminating paper in favor of a completely digital workflow. But, what does this digital transformation look like?

Insurance 120

Insurance Digital transformation Paper Libraries 120

Collibra

JULY 2, 2024

But as most businesses recognize, innovation is nothing without the right governance to ensure that risks don’t get out of hand. AI governance is about increasing business value while retaining control As AI continues to permeate the fabric of life and work worldwide, so too does AI-based risk increase.

Unstructured data 64

Unstructured data Government Risk Metadata 64

eSecurity Planet

APRIL 29, 2024

Integrated risk management (IRM) is a discipline designed to embed risk considerations for the use of technology throughout an organization. In other words, it links technology spending directly to the value of the resource protected and the associated risks controlled by that technology.

Risk 67

Risk Compliance Communications Insurance 67

IBM Big Data Hub

DECEMBER 8, 2023

.” This same sentiment can be true when it comes to a successful risk mitigation plan. The only way for effective risk reduction is for an organization to use a step-by-step risk mitigation strategy to sort and manage risk, ensuring the organization has a business continuity plan in place for unexpected events.

Risk 67

Risk Compliance Insurance IT 67

IT Governance

OCTOBER 11, 2022

That’s a problem when cyber risks are constantly evolving, as is the way your organisation operates. It’s why organisations must manage the risks they face with continual evaluation, maintenance and revision. Managing cyber security risks requires a more intensive approach than simply implementing basic protections.

Risk 120

Risk GDPR Information Security Personal data 120

Data Matters

FEBRUARY 11, 2019

On December 28, 2018, Michigan adopted the National Association of Insurance Commissioners’ (NAIC) Insurance Data Security Model Law in the form of Michigan H.B. The Act defines licensees as persons authorized, registered, or licensed under Michigan insurance laws or required to be so. 6491 (Act). MCL § 500.550. MCL § 500.550.

Insurance 67

Insurance Security Cybersecurity FOIA 67

IT Governance

JULY 15, 2019

Cyber insurance is big business these days. Damages incurred by information security incidents generally aren’t covered in commercial insurance policies, so a specific policy is necessary to help cover the costs of things like forensic investigation, incident response and notification procedures. Document an incident response plan.

Insurance 71

Insurance Data breaches Risk Information Security 71

eDiscovery Law

JULY 12, 2021

Key Insight: Plaintiff’s Motion to Compel sought missing documents and communications from, and the correction of metadata “issues” from Defendant and its parent company (via third party subpoena), and sought an award of attorney’s fees and costs.

Insurance 40

Insurance Metadata Risk Communications 40

Hunton Privacy

JULY 16, 2021

The Proposed Guidance seeks to promote consistency in banking organizations’ third-party risk management, replacing agency-specific guidance with a framework that applies to all banking organizations supervised by the Regulators.

Risk 81

Risk Insurance Sales Encryption 81

eSecurity Planet

AUGUST 27, 2021

In a developing market, third-party risk management (TPRM) software and tools could be the answer to helping organizations fill the gap. This article looks at the top third-party risk management vendors and tools and offers a look into TPRM solutions and what buyers should consider before purchasing. Aravo TPRM.

Risk 130

Risk Compliance Marketing Cybersecurity 130

The Last Watchdog

JANUARY 30, 2019

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Risk 147

Risk Financial Services Insurance Cybersecurity 147

OpenText Information Management

JULY 24, 2024

OpenText™ Content Aviator puts AI into the hands of business users to leverage conversational search, discover content, or even summarize a document or workspace, offering new ways to interact with content and extract knowledge.

ECM 65

ECM Content services Insurance Risk 65

Hunton Privacy

FEBRUARY 29, 2024

The resolution agreement requires Green Ridge to pay $40,000 to OCR and enter into a Corrective Action Plan that obligates Green Ridge to, among other items: Implement a security management process, including a thorough risk analysis, which is to be provided to HHS for review within 60 days.

Ransomware 111

Ransomware Personal data Risk Privacy 111

Everteam

JULY 22, 2020

ICAWOOD Chooses Everteam’s “Fidji” Cloud-based Document Management System for its Real Estate Assets. Indeed, the standard inclusion of the “business” classification scheme ( Fiji ) in the application allows ICAWOOD to use the Fiji document typologies to classify and “type” the stored information.

Cloud 52

Cloud Information governance IT Records Management 52

IBM Big Data Hub

NOVEMBER 30, 2023

Risks from wildfires, floods, heat, drought and wind have always been a concern, but climate change has intensified these risks, making them more frequent and unpredictable for organizations. For instance, proactively identify high-risk assets and develop a contingency plan. What can organizations do about climate change?

Energy and Utilities 85

Energy and Utilities Insurance Risk Retail 85

IT Governance

MAY 3, 2019

An RTP (risk treatment plan) is an essential part of an organisation’s ISO 27001 implementation process, as it documents the way your organisation will respond to identified threats. What are your risk treatment options? What are your risk treatment options? Avoid the risk by ceasing any activity that creates it.

Risk 60

Risk Information Security Communications Security 60

Security Affairs

NOVEMBER 17, 2023

We took certain systems offline to investigate this activity and to reduce risk, and have also begun working with law enforcement.” TFS offers various financial products, including auto loans, leases, and insurance solutions. ” reads a statement published by the company.

Financial Services 130

Financial Services Ransomware Data breaches Insurance 130

eSecurity Planet

SEPTEMBER 16, 2024

A cloud security policy is a comprehensive document that describes the organization’s guidelines for protecting cloud services. Early detection enables proactive risk management and successful mitigation techniques. Enhance risk management: Identifies and handles any risks connected with cloud services.

Cloud 62

Cloud Security Compliance Risk 62

Data Matters

SEPTEMBER 7, 2022

The National Association of Insurance Commissioners (NAIC) held its Summer 2022 National Meeting (Summer Meeting) August 9–13, 2022. The Privacy Working Group has been reviewing state insurance privacy protections regarding the collection, ownership, use, and disclosure of information gathered in connection with insurance transactions.

Insurance 78

Insurance Paper Privacy Risk 78

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. It includes multi-disciplinary risk and compliance management solutions and tools, including: IT & security risk management. Audit management.

Compliance 57

Compliance Risk Government Retail 57

Security Affairs

DECEMBER 11, 2023

TFS offers various financial products, including auto loans, leases, and insurance solutions. Leaked sample data includes financial documents, invoices, hashed account passwords, passport scans, and more. The documents are in German, a circumstance that suggests that they have been stolen from company systems located in Germany.

Financial Services 126

Financial Services Data breaches Ransomware Insurance 126

Hunton Privacy

NOVEMBER 13, 2023

DMS is a HIPAA business associate (“BA”) that provides payer credentialing and medical billing services to HIPAA Covered Entities (“CEs”). As a result, the electronic protected health information (“ePHI”) of approximately 206,695 individuals was affected.

Ransomware 72

Ransomware Risk Insurance Encryption 72

Security Affairs

FEBRUARY 26, 2021

Inova is an actuarial consultancy company, which means they compile statistical analysis and calculate insurance risks and premiums. After further investigation, we have concluded that these documents belonged to people injured or deceased in traffic accidents.

Data breaches 109

Data breaches Insurance Paper Access 109

AIIM

AUGUST 19, 2021

Despite the proven operational improvements to be gain by going paperless, paper is still prevalent in too many core business processes today including loan applications, insurance claims, and customer onboarding. Reduced Business Risks: A fully digital environment allows you to work not only faster, but also safer.

Paper 217

Paper ECM Digital transformation Insurance 217

HL Chronicle of Data Protection

MAY 13, 2019

In the past two years, multiple state bills that have been introduced in the US to provide for cybersecurity requirements and standards to the insurance sector, with recent legislative activity taking place in particular within the States of Ohio, South Carolina, and Michigan. NYDFS: Setting a new bar for state cybersecurity regulation.

Insurance 40

Insurance Cybersecurity Data breaches Financial Services 40

Data Matters

SEPTEMBER 20, 2021

The National Association of Insurance Commissioners (NAIC) held its Summer 2021 National Meeting (Summer Meeting) August 14-17, 2021. Highlights include, among others, adoption of revised risk-based capital bond factors for life insurers, amendments to SSAP No. The changes are effective December 31, 2021.

Insurance 87

Insurance e-Delivery Paper Sales 87

Data Matters

AUGUST 19, 2020

On July 21, 2020, the New York State Department of Financial Services (NYDFS or the Department) issued a statement of charges and notice of hearing (the Statement) against First American Title Insurance Company (First American) for violations of the Department’s Cybersecurity Requirements for Financial Services Companies, 23 N.Y.C.R.R.

Financial Services 67

Financial Services Cybersecurity Insurance Risk 67

Hunton Privacy

AUGUST 10, 2022

NIST issued the updated draft guidance to align it with other NIST cybersecurity guidance documents that have been published since the original HIPAA Security Rule guidance was issued in 2008. The draft guidance does not provide a checklist for HIPAA regulated entities to follow, but rather aims to improve risk management surrounding ePHI.

Security 64

Security Insurance Cybersecurity Risk 64

Hunton Privacy

JUNE 13, 2023

On June 6, 2023, the Federal Deposit Insurance Corporation (“FDIC”), the Board of Governors of the Federal Reserve System (“FRB”) and the Office of the Comptroller of the Currency (“OCC”) issued their final Interagency Guidance on Third-Party Relationships (“Guidance”).

Risk 64

Risk Insurance Compliance Information Security 64

Info Source

JUNE 7, 2023

Contact Bryant for a sample copy of DIR (The Document Imaging Report) and/or subscription details. Fresneda: The biggest one, at least in the United States right now, is clearly insurance. There are so many different document types and unstructured content in the industry. That’s a lot of documentation going back and forth.

Insurance 52

Insurance Marketing Customer Experience Compliance 52

Data Protection Report

OCTOBER 3, 2021

The amendment: Expands the definition of “personal information”; Shortens the notification deadline after discovery of a breach from 90 to 60 days; Removes the requirement to consult with law enforcement as part of a risk assessment; Deems compliant any person subject to and in compliance with HIPAA and HITECH; and.

Data breaches 142

Data breaches IT Insurance Passwords 142

Data Matters

SEPTEMBER 3, 2020

The National Association of Insurance Commissioners (NAIC) held its Summer 2020 National Meeting (Summer Meeting) from July 27 to August 14, 2020. Annuity Suitability Working Group Drafting FAQ Document to Facilitate Uniformity in State Adoption of Revised Suitability in Annuity Transactions Model Regulation.

Insurance 67

Insurance Paper Artificial Intelligence Big data 67

Krebs on Security

DECEMBER 8, 2022

The intercepted CLOP communication seen by KrebsOnSecurity shows the group bragged about twice having success infiltrating new victims in the healthcare industry by sending them infected files disguised as ultrasound images or other medical documents for a patient seeking a remote consultation. Encrypting sensitive data wherever possible.

Ransomware 266

Ransomware Metadata Insurance Encryption 266

The Security Ledger

SEPTEMBER 11, 2019

Third party cyber risk is growing. In this Spotlight Podcast, a companion to our new eBook, Rethinking Third Party Cyber Risk Management, we go deep on the topic of building a mature third party cyber risk program with Dave Stapleton the Director of Assessment. » Related Stories Third Party Cyber Risk is growing.

Risk 40

Risk GDPR Data Privacy Personal data 40

Armstrong Archives

DECEMBER 19, 2023

Everything from tax documents to employee files to bank statements must be kept on file, often for years at a time. At Armstrong Archives , we’re proud to stand at the forefront of records management, offering expert guidance in record retention policy and document management, ensuring that our clients stay compliant and efficient.

Compliance 52

Compliance Archiving Digital transformation Records Management 52