CISOs Play an Important Role in Procuring Cyber Insurance Coverage
On May 24, 2016 Tenable hosted a panel webinar about Five Things Every CISO Must Understand about Cyber Insurance Coverage. Our panel of experts included:
- Ben Beeson: Senior Vice President, Lockton Companies
- Matthew Prevost: Vice President, North American Financial Lines, Chubb
- Matthew Perry: Global Manager, Information and Cyber Security, First Solar
- Craig Shumard: former CISO with Cigna; now Principal, Shumard & Associates
The session explored the reasons why companies are investing in cyber insurance, what’s covered, when and how CISOs should get involved, how CISOs influence coverage decisions and costs, the impact of security best practices, and how insurers may ultimately help insured enterprises lower risk over time.
How does Tenable impact cyber insurance coverage?
When businesses invest in cyber insurance, they go through an underwriting process. CISOs play an important role in underwriting by briefing the underwriter about what they’re doing to protect the business.
CISOs play an important role in underwriting by briefing the underwriter about what they’re doing to protect the business
Among other things, they must be able to adequately describe how they assess and maintain conformance with administrative, technical, and physical controls. The NIST Cybersecurity Framework is increasingly being cited by insurers and industry experts for its value in reducing cyber risk by providing a sound framework for assessing an organization’s overall cyber hygiene.
Tenable provides CISOs with a uniquely effective way to measure, visualize, and communicate strong and comprehensive conformance with technical security controls. This includes NIST CSF conformance, where we can automate the assessment of over 90% of the technical controls AND provide extensive reporting capabilities that empower a CISO with the information needed to brief insurance underwriters, as well as collaborate and communicate with peer executives, boards of directors, and members of the security team.
Tenable provides CISOs with effective ways to measure, visualize, and communicate conformance with technical security controls
By effectively implementing a security framework, you’re better equipped to meet due-care standards, continually identify security gaps, efficiently comply with multiple compliance requirements, and communicate business risk to executives. And, as one of our speakers noted, within the next year, there will likely be a linkage between your effective use of controls and the price you pay for cyber coverage.
Resources
If you’re an information security leader looking for insights about your role in cyber insurance procurement, check out the on-demand version of our webinar. We also encourage you to visit our NIST Cybersecurity Framework page to find more about our solutions for NIST CSF conformance and security framework adoption, a short video, and links to other resources.
Don't miss any Tenable news! Subscribe to the Tenable Blog by clicking Blog email updates on the Blog Home Page.
Related Articles
Security Improvements for Our Ecommerce Customers
May 25, 2022We were recently informed by Kulkan Security of a design flaw in our third-party ecommerce fulfillment system, cleverbridge, that could have potentially allowed customers to accidentally disclose thei...
Manage and Remediate Cloud Infrastructure Misconfiguration Vulnerabilities with Tenable.cs and HashiCorp Terraform Cloud
May 4, 2022Cloud breaches are on the upswing due to preventable misconfigurations. Here’s how you can lower your risk with a new integration between Tenable.cs and Terraform Cloud.
Tenable’s Acquisition Of Cymptom: An “Attack Path-Informed” Approach to Cybersecurity
February 17, 2022Tenable’s recent acquisitions all had the same overarching goal: helping our customers gain better security insights across their cyberattack surface.
CVE-2024-4040: CrushFTP Virtual File System (VFS) Sandbox Escape Vulnerability Exploited
April 23, 2024A zero-day vulnerability in CrushFTP was exploited in the wild against multiple U.S. entities prior to fixed versions becoming available as the vendor recommends customers upgrade as soon as possible.
Operational Technology in the DoD: Ensuring a Secure and Efficient Power Grid
April 19, 2024In an evolving threat landscape, the DoD must make sure that its mission-critical operations don’t experience power outages.
Cybersecurity Snapshot: Cyber Agencies Offer Secure AI Tips, while Stanford Issues In-Depth AI Trends Analysis, Including of AI Security
April 19, 2024Check out recommendations for securing AI systems from the Five Eyes cybersecurity agencies. Plus, Stanford University offers a comprehensive review of AI trends. Meanwhile, a new open-source tool aims to simplify SBOM usage. And don’t miss the latest CIS Benchmarks updates. And much more!
- Announcements
- Executive Management
- NIST
- Security Policy
- Webinars