Cyber Security An Insurer Perspective. Québec, April 29, 2015

Transcription

1 Cyber Security An Insurer Perspective Québec, April 29, 2015

2 About me Kevvie Fowler, GCFA Gold, CISSP Partner, Advisory Services KPMG Canada Bay Adelaide Centre 333 Bay Street Suite 4600 Toronto, ON SANS Lethal Forensicator 1

3 Cyber security the criminals Petty criminals / Motives: Financial gain Hacktivists / Motives: Political support Organized / Motives: Financial gain State / Motives: State agenda 2

4 Cyber security financial motivators The price (USD) of stolen data within the underground economy Health Record / SSN $47.62 Username / Passwords $5.60 Debit Card (#) $9.55 Credit Card (#) $.25 - $100 Loyalty Rewards $.50 for 50k points Social Media $.05 - $8.00 References:

5 Government. Retail. Healthcare. Manufacturing Cyber security the breach Insurers and brokers are not immune from breaches 4

6 Cyber security the solution How do you protect your organization? Take a whole business approach to cyber security 5

7 Cyber security the solution Legal and Compliance Inventory of compliance requirements Compliance program components Role of the Audit Committee Litigation inventory Cyber insurance Leadership and Governance Board involvement Third-party supplier relationships Identification of critical data Ownership and governance for data protection Program management Operations and Technology Threat and vulnerability management Logical security controls Physical security controls Security monitoring Incident response Integration with IT service management Human Factors Training and awareness Culture Personnel security measures Talent management Organizational roles and responsibilities Business Continuity and Crisis Management Ability to manage cyber events Financial ramifications and budget Resources required and training Detailed plans Communications Testing Information Risk Management Risk management approach and policies Risk tolerance identification Risk assessment and measures Change management Information sharing Third party accreditation Information communication architecture 6

8 Merci pour votre attention! Thank you Kevvie Fowler, CISSP, ca.linkedin.com/kevviefowler/

9 2015 KPMG s.r.l./s.e.n.c.r.l., société canadienne à responsabilité limitée et cabinet membre du réseau KPMG de cabinets indépendants affiliés à KPMG International Cooperative («KPMG International»), entité suisse. Tous droits réservés KPMG, le logo de KPMG et le slogan «simplifier la complexité» sont des marques déposées ou des marques de commerce de KPMG International.