A new court ruling could affect cyber insurance policy exclusions and insureds could assume more costs in the event of a loss. The ruling underscores the fact that cyber insurance is no substitute for cyber defense.
The legislation adopts a national model for insurer cybersecurity mandating that insurance entities implement new cybersecurity protections to better safeguard nonpublic information from nefarious threat actors.