Practical analysis on cyber insurance, resilience planning, incident response, and compliance.
Regulatory & Privacy ComplianceWhen Labcorp agreed to pay $2.3 million and overhaul its vendor management program following a 2019 breach affecting 10.2 million customers, the settlement highlighted essential vendor security contro
Regulatory & Privacy ComplianceTwenty percent of UK businesses chose not to report serious cyber incidents, according to Databarracks survey data. This isn t a hypothetical compliance gap. It s a measured failure rate that puts org
Breach Response ServicesA hacker posed as a government agency and extracted customer data from Revolut for five months. The breach occurred because Revolut, like most financial institutions, must legally respond to law enfor
Regulatory & Privacy ComplianceThe Question at Hand A joint government advisory is urging organizations to adopt more transparent breach notification and incident response protocols. This raises a practical dilemma for risk manager
Get weekly security insights and compliance updates delivered to your inbox.
Cyber Threats & AttacksAfter the Veradigm breach made headlines, questions about third-party risk management arose in several risk committee meetings. One CISO asked during a vendor review, a compliance officer sought to up
Systemic Risk & ReinsuranceUnderstanding the Shift Insurance industry losses from non-peak perils surpassed $100 billion for the first time in 2025, marking the sixth consecutive year of global insured losses exceeding this thr
Breach Response ServicesWhen Manchester Airports Group disclosed that 8.8 million records leaked after refusing a ransom demand, the story wasn t just about extortion. It revealed how organizations often mishandle third-part
Systemic Risk & ReinsuranceContext: Questions from the Renewal Planning Trenches These questions arise from discussions with enterprise risk managers preparing for the January 2027 renewal season. You re seeing headlines about
Systemic Risk & ReinsuranceThe reinsurance market is in a rare buyer-friendly phase. Prices are dropping, capacity is abundant, and coverage terms are expanding. If you re responsible for your organization s reinsurance program
Systemic Risk & ReinsuranceYour reinsurance program might look solid on paper, but headline numbers don t reveal whether your counterparties can handle the next major event. They might already be overextended, chasing yield in
Regulatory & Privacy ComplianceIf your organization is deploying AI in production, your current risk register is likely incomplete. AI introduces unique risks that don t fit traditional vulnerability categories. You need a structur
Regulatory & Privacy ComplianceMost enterprise risk managers treat the NIST CSF as a compliance checklist. You download the framework, map your controls to the five core functions, check the box, and move on. A year after CSF 2.0 s
Security ControlsYou don t need another checklist. You need a way to decide which IoT security approach actually works for your organization s specific context. The NIST Cybersecurity for IoT Program has spent years b
Cyber Threats & AttacksWhen Berlin s government discovered a breach on Aug. 14 and disconnected two ministries from the state network, officials faced a familiar ultimatum: pay 30 bitcoin (roughly $2.3 million) or watch 5.7
Premium & Actuarial PricingUnderstanding the Impact of Reinsurance Price Cuts When reinsurance prices drop, your insurance broker might call with news of potential savings. Your CFO sees budget relief, and your underwriter sugg
Premium & Actuarial PricingPurpose of the Template Your underwriting questionnaire is crucial in determining your coverage, premium costs, and the speed of claim processing. Generic cyber questionnaires often overlook the speci
Regulatory & Privacy ComplianceWhen the National Association of Insurance Commissioners (NAIC) disclosed a breach in June, the industry s first reaction wasn t panic, it was surprise. Not because a breach happened, but because many
Systemic Risk & ReinsuranceThe global reinsurance market is currently experiencing abundant capacity and intense competition, as noted by Fitch Ratings . Prices are dropping across most lines, and policy terms are loosening. Fo
Regulatory & Privacy ComplianceIf you re carrying a $25 million cyber policy, you might assume it covers a $25 million regulatory penalty. It doesn t. For most programs, the regulatory fine sub-limit sits somewhere between $1 milli
Regulatory & Privacy ComplianceThe Challenge of Governing AI The NIST Second Cyber AI Profile Workshop gathered over 1,400 comments from professionals grappling with AI adoption within existing risk frameworks. These questions aren
