Practical analysis on cyber insurance, resilience planning, incident response, and compliance.
Claims HandlingA ransomware attack in May 2023 shut down most of Crash Champions operations. The auto body repair company had bought a $10 million Stand-Alone Cyber Policy from Coalition just three months earlier. C
Breach Response ServicesA threat actor accessed CenterPoint Energy s systems and copied 7.49 million customer records without setting off any alarms. The entry point was a public API, and it lacked proper security measures.
Claims HandlingThe conventional wisdom suggests that if your home didn t burn down in a wildfire, you were lucky. Smoke and ash contamination are often seen as cosmetic issues that a good cleaning crew can handle. I
Regulatory & Privacy ComplianceThe Question at Hand A joint government advisory is urging organizations to adopt more transparent breach notification and incident response protocols. This raises a practical dilemma for risk manager
Get weekly security insights and compliance updates delivered to your inbox.
Cyber Threats & AttacksCISA recently added five actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog, affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS. Remediation d
Systemic Risk & ReinsuranceScope - What This Guide Covers This guide explores the challenges of integrating cyber incidents with terrorism insurance programs like TRIA . It s aimed at claims and coverage counsel assessing wheth
Breach Response ServicesIn June, over 4.1 million individuals had their health information stolen from AdaptHealth , not because the company s perimeter failed, but because a third-party contractor s session was compromised
Cyber Threats & AttacksAfter the Veradigm breach made headlines, questions about third-party risk management arose in several risk committee meetings. One CISO asked during a vendor review, a compliance officer sought to up
Policy ExclusionsThe Terrorism Risk Insurance Act (TRIA) backstop isn t a substitute for a complete terrorism risk assessment. It s a federal reimbursement mechanism that only activates after you ve already paid claim
Systemic Risk & ReinsuranceYour 2027 cyber reinsurance renewal isn t routine this year. If you re reassessing your program structure, you re facing a strategic choice: do you increase your cession and push more risk upstream, o
Systemic Risk & ReinsuranceUnderstanding the Shift Insurance industry losses from non-peak perils surpassed $100 billion for the first time in 2025, marking the sixth consecutive year of global insured losses exceeding this thr
Premium & Actuarial PricingPurpose of the Template Your cyber insurance policy might not cover the latest AI-driven threats. Although global cyber insurance market rates dropped 5% this year, AI-related cyber losses could surpa
Breach Response ServicesWhen Manchester Airports Group disclosed that 8.8 million records leaked after refusing a ransom demand, the story wasn t just about extortion. It revealed how organizations often mishandle third-part
Systemic Risk & ReinsuranceThe Challenge You re sitting with your underwriting team, reviewing January renewal projections that show price declines for a third consecutive year. Your portfolio just posted a 21.5% return on equi
Regulatory & Privacy ComplianceScope This guide focuses on GDPR Article 32 security requirements for healthcare systems handling patient data, emphasizing access control architectures and monitoring obligations. It s designed for s
Regulatory & Privacy ComplianceWhy This Matters Three California bills (SB 877, SB 878, SB 1301) awaiting Governor Newsom s signature will change how you process residential property claims and handle nonrenewals. If signed, you ll
Systemic Risk & ReinsuranceContext: Questions from the Renewal Planning Trenches These questions arise from discussions with enterprise risk managers preparing for the January 2027 renewal season. You re seeing headlines about
Cyber Threats & AttacksA ransomware attacker infiltrated an enterprise network in under 10 hours using AI agents to automate reconnaissance, credential harvesting, and lateral movement. Palo Alto Networks Unit 42 team inves
Systemic Risk & ReinsuranceWhen your CFO asks what the reinsurance program actually delivers, you need more than a broker presentation deck. You need a document that connects every dollar of premium to a specific risk transfer
Resilience & RecoveryThe New Reality The cyber threat model you built your controls around has changed dramatically. Two years ago, a skilled attacker needed months to map your network, identify vulnerabilities, and execu
