How is cyber security insurance managed in financial institutions; is it managed by ERM or CIO- cyber risk team?

2.6k viewscircle icon4 Comments
Sort by:
Senior VP & CISOa year ago

All insurance managed by ERM but CISO team works with them on Cyber insurance 

Lightbulb on1
Global Chief Cybersecurity Strategist & CISO in Healthcare and Biotech2 years ago

What do you mean by "managed!" The CFO in many small to mid size companies deal with the brokers to get the quotes and defend budget concerns. Legal reviews that contract terms. The CISO should be involved in the security and data architecture reviews and questions. I also give strong input to the amounts needed, additional riders e.g. AI, etc. In the end it's an Enterprise Risk Management evaluation case to evaluate what risks to self- insure, etc. Remember that contracts may require certain limits but always check to see if the next higher band is more cost effective. Cyber liability insurance also helps with reputation management, forensics, etc so many departments and leaders need to be part of the process.

Chief Information Security Officer in Healthcare and Biotech2 years ago

It depends on the organisation’s structure but for BFSI co-owned by CIO and CISO 

Director IT in Software2 years ago

Its Managed by ERM

Content you might like

HashiCorp (Terraform, Vault, Packer, etc.)22%

Cloud infra automation (Ansible, Puppet, Chef, etc.)56%

APM (Datadog, AppD, SignalFX, NewRelic, etc.)10%

Others?10%

View Results

I am a huge fan of this technology20%

I find this technology very useful, yet have some slight doubts64%

I have quite a few doubts about this technology12%

I am not a fan of this technology at all2%

View Results