cyber security: the growing liability of handheld & mobile devices€¦ · 18-09-2012 ·...
TRANSCRIPT
1
Cyber Security: The Growing Liability of Handheld & Mobile Devices
2
About Advisen: Advisen Ltd. is a privately-owned, independent and unbiased provider
of news, data and risk analytics to the commercial insurance industry.
Advisen’s mission is to deliver productivity and insight to
insurance professionals. Advisen brings greater success though
technology and data, revolutionizing the way the commercial
insurance industry functions. Our customers leverage the Advisen
platform, adding power to their proprietary ability and bringing
value to their clients.
Please locate us on: www.advisen.com
Many Thanks to our Sponsor!
4
Cyber Security: The Growing Liability of Handheld & Mobile Devices
http://corner.advisen.com
• White Paper:
The Liability of Handheld & Mobile Devices
• Copy of these slides
• Recording of today’s webinar
Today’s Moderator
David Bradford- President, Research &
Editorial Group, Advisen Ltd.
Today’s Panelists
Larry Collins, Vice President, E-Solutions Risk
Engineering, Zurich NA
John Mullen, Parter, Nelson Levine de Luca &
Hamilton
Catherine Mulligan, Senior Vice President, Zurich NA
Today’s Panelists Catherine Mulligan, Senior Vice President, Zurich NA
Catherine has specialized in the risk management and risk transfer issues around
technology, Errors & Omissions, Intellectual Property, and Security & Privacy for 15
years as both an underwriter and a broker.
Catherine is a Senior Vice President of Zurich North America, where she is the
national underwriting manager for Specialty E&O. The group handles Errors &
Omissions, Security & Privacy, and Employed Lawyers.
Prior to Zurich, Catherine was an AVP at The Chubb Group of Insurance companies
where she was a regional underwriting manager in the technology division, earning
her Underwriting Specialist designation with a focus on E&O. She later spent 3 years
as a broker at William Gallagher Associates in New York City, where she worked with
technology and life sciences companies.
Catherine is a frequent speaker at events relating to Security & Privacy and
Technology E&O issues. She contributes to articles and interviews for industry
publications. She graduated cum laude from The College of the Holy Cross in
Worcester, MA with a double major in English and Women's Studies.
Today’s Panelists Larry Collins, Vice President, E-Solutions Risk Engineering, Zurich NA
Larry has more than 35 years of experience in Risk Engineering.. As the Vice President for E-
Solutions, he leads a team that provides electronic services to tens of thousands of on-line
customers. He’s appeared on TV on cyber security, has spoken on a number of panels and
has published several articles and white papers on Security and Privacy related risk issues.
He’s done many media interviews on that subject.
Larry’s team recently received the Arthur Quern Quality Awards from the Risk and Insurance
Managers Society (RIMS) for their Accident Review Tool. The Arthur Quern Quality Award
recognizes significant contributions within the field of risk management that raises the quality
of products, processes, programs, systems and services. The recipient of the Arthur Quern
Quality Award demonstrates innovation within the risk management industry and increased
quality in products, services and enterprise risk management within an organization.
Today’s Panelists John Mullen, Parter, Nelson Levine de Luca & Hamilton
John Mullen leads the Privacy and Data Security Practice at Nelson Levine de Luca &
Hamilton. John focuses his practice on the defense of information security and
privacy matters, with particular emphasis on response to data loss events and suits.
He serves as legal Breach Counsel, advising clients on issues related to IT forensics,
customer and government notification and compliance, public relations, customer
remedies, litigation hold/e-discovery requirements, and class action/multi-district
litigation (MDL) issues. John frequently presents to insurers, insureds, risk managers
and brokers, and has authored articles on the subject that have appeared in various
publications including Best’s Review and Business Insurance.
What is driving the rapid growth in the use of handheld devices for business
purposes? What are some of the common business uses for these devices?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
Is losing a device the most significant data security threat?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
Are these devices more vulnerable to data breaches than other types of
computing and communication devices?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
Can you explain what near field communication technology is, and the risks it
presents?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
How vulnerable are these devices vulnerable to malware?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
Do employees commonly use their personal devices for business purposes?
Does this lead to increased vulnerabilities?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
Do government regulators and organizations such as PCI regulate data
security and breach events that exist with the new mobility of data?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
Given the risks posed by these devises, why do companies permit their use?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
What has been the response of corporate IT departments and others
responsible for data security?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
What risk management actions can improve the security of handheld devices?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
What should be the focus of a company’s mobile device policy?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
What should be done if a handheld devise housing or accessing sensitive
information is lost?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
What insurance coverages are available for mobile device data breaches?
John Mullen, Parter,
Nelson Levine de
Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk
Engineering, Zurich NA
Q&A
24
White Paper: Available on Advisen’s Corner Store
25
Upcoming Advisen Webinars
Visit http://corner.advisen.com/advisen_webinars.html for the 2012 Webinar Schedule
The Reputational Risk of a Data Breach
Tuesday, September 25, 2012 at 11am EDT
Business Interruption-Business Income & Supply
Chain Risks
Wednesday, September 26, 2012 at 11am EDT
26
Upcoming Advisen Conferences
Visit http://corner.advisen.com/advisen_conference.html for the 2012
Webinar Schedule
Management Liability Insights Conference
Date: Thursday Septmeber 20, 8:00 AM EDT
Location: McGraw Hill Conference Center, NYC
Cyber Liability Insights Conference
Date: Wednesday October 24, 8:00 AM EDT
Location: Bridgewaters, NYC
27
How to reach us: Advisen Ltd.
1430 Broadway
8th Floor
New York, NY 10018
www.advisen.com
Voice: +1.212.897.4800
Fax: +1.212.972.3999