Cyber Insurance 101 for Government Contractors with Rick Rosenberry

In this episode Jacob speaks with Rick Rosenberry about Cyber Insurance in the context of DoD and government contracting.

Rick is an insurance broker and a CMMC Registered Practitioner, and he explains that not all cyber insurance policies are equal and the importance of working with an insurance broker that understands cybersecurity and your regulatory environment.

Here are a few topics we discussed:

- Overview of cyber insurance fundamentals
- Key roles in the cyber insurance process
- How underwriters assess a business's cyber risk
- Critical security controls underwriters want in place
- Benefits of compliance frameworks like NIST 800-171 and ISO 27001
- False Claims Act cyber insurance claim scenarios
- Getting the right coverage to support DFARS 252-204-7012 incident reporting

-----------

Governance, Risk, and Compliance Academy (GRC) Academy is a training and research platform!

Need a FedRAMP authorized Password Manager?

00:00 Beginning
00:15 Rick's background
00:56 What is cyber insurance
01:19 Common misconceptions about cyber insurance
01:54 Key roles involved in cyber insurance
02:27 What does a cyber insurance policy pay for?
03:10 How do underwriters assess a business's cyber risk?
04:03 Security controls that businesses struggle with
04:53 Critical security controls underwriters require
05:53 What security standards are recognized by underwriters?
07:04 The importance of the cyber insurance broker
09:02 How cyber insurance fits in with the DOJ's Civil Cyber Fraud Initiative
10:56 Getting the right coverage to support DFARS 252.204-7012 incident reporting
12:30 Conclusion