Cyber Insurance - insurtechindonesia.com.pdf

•

0 likes•69 views

Cyber insurance protects against risks from technology and data use. In Indonesia in 2022, there were 7 cases of personal data breaches including the largest data breach in Asia involving 1.3 billion SIM cards. Regulations on data protection are increasing globally and in Indonesia. Cyber insurance works as part of an overall cyber risk management plan including risk assessment, protection/detection, and response plans. It covers first-party losses like data loss and third-party liability from issues like data privacy breaches. The scope of coverage depends on factors like a company's industry, size, security practices, and data management.

Education

Cyber Insurance
Afrianto Budi, CIIB, QRGP, AZIIF (Sr Assoc) CIP

Kasus Cyber Breach di Indonesia
• 7 kasus kebocoran data pribadi sepanjang 2022
• Kasus kebocoran 1.3 miliar data SIM Card di Indonesia → terbesar di Asia
• 91 juta data pengguna & 7 juta merchant Tokopedia bocor; digugat Rp100M
• 13 juta data Bukalapak dijual hacker
• Peretasan Tiket.com, rugi Rp1.9M
• 2.9juta data Cermati.com bocor di Internet
InsurtechIndonesia info@insurtechindonesia.com +6281381024460 InsurtechIndonesia.com

Regulasi
HIPPA (Federal): Health insurance
breach notification
2003
Mandatory Notification (California)
2003
Federal & State: HIPPA enhanced.
Similar requirements to California
replicated in most other states
2009–2013
GDPR (EU): General Data Protectuin
Regulation passed - comes into force
in May 2018
2016
Rancangan Undang-Undang
Perlindungan Data Pribadi,
Indonesia
2022
InsurtechIndonesia info@insurtechindonesia.com +6281381024460 InsurtechIndonesia.com

Di mana asuransi bekerja?
Asuransi hanyalah salah satu bagian dari suatu cyber risk management
Map Risk
Protection
& detection
Insurance
Response
Plan
InsurtechIndonesia info@insurtechindonesia.com +6281381024460 InsurtechIndonesia.com

Definition
• Cyber Risk Insurance atau Cyber Liability Insurance Coverage (CLIC) adalah
produk asuransi yang menjamin berbagai risiko yang timbul dari penggunaan
teknologi dan data
• Prudential Regulation Authority (PRA) menyebutkan ada dua jenis risiko siber,
yaitu:
• Kerugian akibat tindakan jahat (yaitu, serangan siber atau infeksi sistem TI
oleh kode jahat).
• Kerugian akibat kelalaian (yaitu, kehilangan data atau tindakan atau kelalaian
yang tidak disengaja).
• Akibat dari risiko siber dapat bersifat pihak pertama dan pihak ketiga
InsurtechIndonesia info@insurtechindonesia.com +6281381024460 InsurtechIndonesia.com

Strategi Risk-Based Cyber Insurance
Mendefinisikan Akibat
Identifikasi Skenario Mengevaluasi Posisi Jaminan
Asuransi yang Tepat
InsurtechIndonesia info@insurtechindonesia.com +6281381024460 InsurtechIndonesia.com

Cyber Coverage
Cover Property
General
Liability
General
Liability
PI / D&O IT Liability Crime
Cyber
Security
1st Party
Incidence Response X X X X X ? V
Information Asset Loss X X X X X ? V
Regulatory X X V X X ? V
Cyber Extortion Expenses X X X X X ? V
Loss of Income X X X X X ? ?
InsurtechIndonesia info@insurtechindonesia.com +6281381024460 InsurtechIndonesia.com

Cyber Coverage
Cover Property
General
Liability
General
Liability
PI / D&O IT Liability Crime
Cyber
Security
3rd Party
Data Privacy Liability X X ? ? ? X V
Media Liability X ? ? ? ? X V
Network Security Liability X X X X ? X V
X Not generally covered
V Covered
? Uncertain or varied coverage
InsurtechIndonesia info@insurtechindonesia.com +6281381024460 InsurtechIndonesia.com

With the growth of data and digital transformation in India, organizations face intense pressure to secure sensitive data from external and internal threats. As India implements initiatives like Digital India, there are concerns about a rise in cyber attacks and data breaches as more citizens use digital services. A data breach at one organization could have a devastating domino effect on other connected organizations. To securely enable India's shift to cashless digital payments and smart cities, strong security measures and education around cyber security are needed to prevent fraud and protect individuals and enterprises.

A Cybersecurity and Digital Risk Assessment: A Family Case Study

CSEIJJournal

Digitalization is not limited merely to business companies and high-tech industries; it has increasingly changed families' behaviors and attitudes as they are exposed to the digital world using different technological aspects. Therefore, numerous risks can be raised between all members of the family. For example, if IoT devices in a smart home are not embedded with high-security standards, they would be vulnerable to being attacked by hackers. Cyberattacks will not be limited to attacking virtually, but also they could unlock the home's door from the phone, and accordingly, the criminal will enter the home, and they can lose much more than credit cards. In this paper we identified various types of risks, with providing an analysis about the vulnerabilities and protecting families from digital attackers

Cyber Security in UAE - Trends That You Should Never Forget

Techugo

Internet

hetal001

The document provides 10 tips from various experts on improving security for Internet of Things devices. The tips include implementing BYOD policies, having manufacturers design security into devices from the beginning, not rushing into IoT technology without proper security measures, adding layers of security like VPNs, integrating security into the development process, using automation to improve security operations, integrating cyber threat intelligence, training software developers in security, stopping employee negligence, and gaining better control of the "oceans of the internet" through standards and understanding of hacker capabilities. Each tip is accompanied by a short quote from an expert providing additional context.

Ten Expert Tips on Internet of Things Security

Dean Bonehill ♠Technology for Business♠

expert tips

Mcolisi Tineth Ngwenya

Gdpr and smart cities

Bart Van Den Brande

The document discusses Singapore's cybersecurity strategy and legal framework. It has 4 pillars: (1) enhancing Singapore as a trusted hub, (2) promoting collective responsibility, (3) using cybersecurity as an advantage, and (4) national cyber R&D. The Cybersecurity Act designates critical infrastructure and gives the Cyber Security Agency powers to investigate incidents. The strategy aims to strengthen cyber defenses, educate the public, and develop Singapore as a cybersecurity hub in Asia.

5G-and-IoT-vs-cyber-security.pdf internet

superintendingengine17

This document discusses cybersecurity trends in India and around the world. It notes that cyber attacks cost an estimated $6 trillion annually and that companies are increasing investments in cybersecurity to protect customer data. The rollout of 5G networks and increased IoT devices will expose billions more devices to threats from hackers. Experts predict a shortage of over 3.5 million cybersecurity specialists by 2021 due to a lack of qualified candidates to fill open roles. The document outlines various cybersecurity challenges and recommendations around 5G, IoT, regulations, and developing cybersecurity expertise.

Verizon 2014 data breach investigation report and the target breach

Ulf Mattsson

The landscape of threats to sensitive data is changing. New technologies bring with them new vulnerabilities, and organizations like Target are failing to adapt to the shifts around them. What’s needed is an approach equal to the persistent, advanced attacks companies face every day. The sooner we start adopting the same proactive thinking hackers are using to get at our data, the better we will be able to protect it. In this webinar, Protegrity CTO and data security thought leader Ulf Mattsson integrates new information from the Verizon 2014 Data Breach Investigation Report (DBIR) into his analysis on what is driving data breaches today, and how we can prevent them in the future. KEY TOPICS INCLUDE: • The changing threat landscape • The effects of new technologies on breaches • Analysis of recent breaches, including Target • Compliance vs. security • The importance of shifting from reactive to proactive thinking • Preparing for future attacks with new technology & techniques

Gdpr and smart cities

Bart Van Den Brande

Arena - Designing for trust

Knight Moves

GPDR_Get-Data-Protection-Right

James '-- Mckinlay

This document discusses preparations for the General Data Protection Regulation (GDPR) which takes effect in May 2018. It begins by outlining how GDPR compliance was previously viewed, with most companies believing they were unprepared. It then discusses key aspects of GDPR including higher fines, strengthened consent requirements, privacy by design, mandatory breach reporting, expanded obligations for processors, and mandatory data protection officers. Finally, it provides recommendations for steps companies can take to prepare such as forming a steering group, training, conducting data discovery and impact assessments, updating policies, and creating breach response plans. The overall message is that early preparation is important to avoid noncompliance under the new, stricter GDPR requirements.

Top Cyber Security Course in India - GICSEH.pdf

GICSEH

Data Privacy: What you need to know about privacy, from compliance to ethics

AT Internet

Today, balancing business opportunity and customer's data protection has become a difficult challenge. As technology, data sources and targeting abilities grow, so does the crucial need to respect user privacy and ensure a good data protection. But with laws, practices and definitions that are constantly evolving around the world, it can all seem a bit confusing. Not sure where to start? Wondering how you can better align with privacy law? Then this webinar is for you.

2015 Cyber security solutions vs cyber criminals @WOHIT2015 (EU eHealth week)

Andris Soroka

Cybersecurity in Sudan: Challenges & Opportunities

Mohamed Amine Belarbi

Event Agenda: 1. Company presentation - Welcome remarks & Introduction 2. Threat landscape - What cyber threats is Sudan facing and impact of breaches on private & public sector 3. PCI DSS - PCI benefits and opportunities for private sector and unlocking global opportunities 4. Security Operation Centers - Importance of SOC and its benefit to overall cyber resilience for public & private entities 5. Cyber insurance - Importance of having cyber insurance to hedge risk

20210526 cybersafety first! Sirius Legal webinar for Comeos

Bart Van Den Brande

The document discusses cybersecurity risks and measures to mitigate them. It begins by outlining the current cyber threat landscape, including statistics on ransomware attacks in Belgium. It then covers legislative initiatives on cybersecurity and resilience, such as the GDPR and NIS Directive. Finally, it recommends various internal and external measures organizations can take, including security clauses in contracts, penetration testing, privacy impact assessments, and incident response planning. The overall message is that cybersecurity requires a holistic, risk-based approach combining technical and organizational measures.

AI Meets 21stC Security: Trends & Scenarios!

Dr David Probert

Brief article on the Impact of Artificial Intelligence & Machine Learning on the Security Sector. We review the fundamentals of AI Security before providing a quick review of key sectors. Finally we provide a speculative set of scenarios for 2030, 2050, 2075 & 2100 regarding the possible future evolution of artificial intelligence. This includes a short assessment of the risks that autonomous AI tools bring that could prove to be an existential risk to Human Life, Culture & Society. This year will be 50 years since I started my own PhD into AI - "Stochastic Machine Learning" at Cambridge University Statistical Laboratory which is part of the Department of Mathematics. Enjoy!

Interner of Things Iinsurance gateway

Δρ. Γιώργος K. Κασάπης

The document discusses the Internet of Things (IoT) and its implications for insurance. It notes that as more "things" become connected to the internet and collect data, this creates opportunities for new types of insurance products based on device interactions and data-driven risk assessments. However, it also raises issues around data integrity, privacy, security and regulation that must be addressed. The insurance industry could gain over $1 trillion in new premiums if it properly manages risks related to data, cybersecurity, cloud computing and more.

Averting the dangers embedded in lack of privacy law in nigeria by arazim

Arazim Sheu

IoT and security

IET India

The Internet of Things (IoT) already helps billions of people. Thousands of smart, connected devices deliver new experiences to people throughout the world. Examples include connected cars, robotic manufacturing, smarter medical equipment, smart grid, countless industrial control systems and many more. Unfortunately, this growth in connected devices brings increased security risks. Threats quickly evolve to target this rich and vulnerable landscape. Serious risks include physical harm to people, prolonged downtime, and damage to equipment such as pipelines, blast furnaces, power generation facilities etc. As several such facilities and IoT systems have already been attacked and materially damaged, security must now be an essential consideration for anyone making or operating IoT devices or systems, particularly for the industrial Internet. How can anyone secure the IoT? IoT systems are often highly complex, requiring end-to-end security solutions that span cloud and connectivity layers, and support resource-constrained IoT devices that often aren’t powerful enough to support traditional security solutions. Security must be comprehensive or attackers simply exploit the weakest link. Of course, traditional Information Technology (IT) systems often drive and handle data from IoT systems, but IoT systems themselves have unique additional security needs. The security solution should be powerful and easy-to-deploy foundations of security architectures to mitigate the vast majority of security threats to the Internet of Things, including advanced and sophisticated threats. This paper describes the necessity and strategies for easy and effective implementation. No single, concise document can cover all of the important details unique to each vertical. Instead, this paper attempts to provide advice applicable to all verticals, including automotive, energy, manufacturing, healthcare, financial services, government, retail, logistics, aviation, consumer, and beyond.

Spotlight on Technology 2017

Craig Devlin

This document provides an agenda for the Spotlight on Technology (#SOT17) event. The agenda includes times for registration, exhibitor meet and greets, presentations from various technology companies (including SmartSTEMs, Pure Storage, ZoneFox, Lenovo, and Trend Micro), panels on threats and how to manage them, and a customer panel with Q&A. Presentation topics include GDPR compliance, ransomware attacks, and user behavior analytics for insider threat detection. The event aims to inform attendees about new technologies through demonstrations and discussions of current issues.

Brendan Byrne, Security Services Consulting and Systems Integration Leader at...

Global Business Events

The Role of Technology in Modern Security Services Trends and Innovations.pdf

Max Secure Ltd

How Can You Preserve Your Virtual Security in 2022 Arizona Attorney Aaron Ke...

Aaron Kelly Lawyer

This article discusses how to preserve virtual security in 2022. It provides advice from Arizona Attorney Aaron Kelly on data security challenges for both corporations and individuals. The article recommends checking your computer and network security, and emphasizes the importance of digital security to guard against data loss. It highlights smart cards and their encryption capabilities as an increasing tool to help secure transactions and prevent data theft. Overall, the article stresses the growing importance of data security due to increased online activity and global threats.

Smart Data Module 5 d drive_legislation

caniceconsulting

Buku Soal Jawab LSPP AAMAI 102: Hukum Asuransi Tahun 2024

Cyber Insurance - insurtechindonesia.com.pdf

Recommended

Recommended

More Related Content

Similar to Cyber Insurance - insurtechindonesia.com.pdf

Similar to Cyber Insurance - insurtechindonesia.com.pdf (20)

More from Afrianto Budi

More from Afrianto Budi (20)

Recently uploaded

Recently uploaded (20)

Cyber Insurance - insurtechindonesia.com.pdf