10 measures to stay cyber security compliant as an insurance agency- Part 1

To stay cyber security compliant, an insurance agency that collects both PII (Personally Identifiable Information) and PHI (Protected Health Information) must take several important steps:

1. Implement a strong Written Information Security and Incident Response Policy:

Develop and enforce comprehensive guidelines for data collection, storage, and sharing as well as a response protocol if a cyber incident occurs. Ensure all employees are thoroughly trained on these policies and understand their responsibilities.

2. Develop a data breach response plan:

Create a well-defined plan outlining steps to be taken in the event of a security incident, including procedures for detecting, containing, and mitigating breaches, as well as notifying affected individuals and relevant authorities.

3. Monitor system activity:

Continuously monitor systems and networks for suspicious activities or unauthorized access attempts.

4. Encrypt data:

Use encryption for both storing and transmitting PII and PHI to prevent unauthorized access. This includes encrypting data at rest and in transit both in the forms of backups and outbound e-mails.

5. Implement transmission safeguards:

Use encryption and secure networks to protect data during transmission both via e-mail and file sharing.

These steps enhance your cyber security posture and maintain compliance with regulations governing PII and PHI protection.