Podcast: Play in new window | Download (Duration: 17:35 — 24.2MB)
Subscribe: RSS
Tech-related business insurance is evolving fast and Anthony Dolce, our guest on this episode of Chattinn Cyber, is a thought leader at the forefront. As head of Professional Liability & Cyber Underwriting at The Hartford, he brings 25 years of industry expertise to the myriad issues shaping policy development and recommended coverages for businesses – whether tech giants or third-party users of technology. Anthony explains the differences between Cyber and Tech Errors & Omissions (E&O) policies – as well as who needs which and in what combination. He also highlights for Host March Schein, National Co-Chair of the Cyber Center for Excellence, the confluence of factors that make tech companies such attractive targets for threat actors. You’ll learn about the most common – and damaging – cyber liabilities out there; things like network attacks, ransom ware assaults, data breaches, business interruption, data restoration costs and third-party vulnerabilities. And don’t miss our guest’s comprehensive list of best practices to control risk for companies of all kinds, whatever their core business. “Nothing’s a silver bullet, but you can help mitigate potential exposure,” says Anthony, whose Connecticut-based career began in claims before migrating to underwriting. Find out what differentiates The Hartford’s Tech E&O and Cyber insurance solutions and how their team of experts guarantee insureds the best possible outcomes when privacy breaches, data hacks or other negative events occur. (Hint: specialized expertise and preparedness are key!)
Key Takeaways:
- Why taking a leap and moving to the business side at The Hartford was one of those pivotal choices that changed the course of Anthony’s career – and all too the good!
- From claims to underwriting: How Anthony made the jump and why it has shifted his focus.
- About the collaborative, social elements that define much of the underwriter’s process and goals.
- What’s a Cyber Policy? If you’re doing business of any kind on the internet, then you probably need some form of coverage.
- What’s a Tech E&O Policy? If you providing a tech service of some kind, then you probably need some form of coverage.
- At the intersection: A look at insurance policies that simultaneously cover exposures in the realms of both Cyber and Tech C&E exposure.
- About the evolution of Tech E&O + Cyber and coverages required in an internet economy full of data transmittal, management and risk exposures.
- Why large technology companies are such high-value targets for threat actors eager to double-dip by accessing downstream secondary client information.
- How The Hartford differentiates itself as an established carrier with a wide array of solutions for any business eventuality:
- Stand-alone Tech E&O coverage.
- Tech E&O coverage + cyber coverage.
- A wide variety of mix-and-match options.
- Specialized tech expertise to ensure optimal insurance outcomes.
- About potential cyber liabilities unique to technology firms:
- Network cyber-attacks.
- Ransom ware attacks.
- Data breaches (and related extortion).
- Business interruption.
- Data restoration costs.
- Professional/product exposure due to third-party contractual, regulatory or subrogation issues.
- Supply chain and systemic risk: A closer look at the variety of vulnerabilities passed down to companies impacted by global industry events.
- Recommended best practices to note:
- Perform regular software composition analyses.
- Deploy tools to track vulnerabilities.
- Undertake regular code reviews, including both static and dynamic scans.
- Implement regular in-house or third-party security and resiliency testing.
- Develop a solid IRP (Incident Response Plan).
- Ensure that your cyber insurance carrier is an integral part of your IRP.
- Stage incident response table-top exercises to align all stakeholders.
- Establish a roll-back plan to close vulnerabilities and limit negative events.
- Monitor your product and its resiliency.
- Remember: There are no silver bullets; only solid preparation maximizes risk mitigation and rapid recovery.
- Key Quotes:
- “You only get so many pivots in your career, as I tell junior folks, and so I jumped at the challenge to be on the business side (at The Hartford) and I’m happy I did.” – Anthony (01:50)
- “With underwriting, everyone is generally trying to get to a point where there’s agreement, a deal, a win. And that’s one of the things I really like about it.” – Anthony (02:54)
- “When breach and notification laws came into existence when California passed its first law around 2000, you started to have the need for a number of different coverages both for first-party and third-party.” – Anthony (05:49)
- “Tech companies accounted for nearly a quarter of ransom ware attacks within the last few years … and part of that is that they’re just a very attractive target by virtue of their interaction with clients and what they do.” – Anthony (08:32)
- “You really do need specialized tech expertise (to) get the best result for your insureds and guide them through what can sometimes be a complicated scenario with both first-party and third-party coverages, depending on what’s happened.” – Anthony (10:34)
- “One of the biggest areas of concern when I speak to general folks in the cyber marketplace is supply chain and systemic risk.” – Marc (12:42)
- “Make sure you’re making your cyber carrier an integral part of (your) IRP. Utilize their resources and their claims folks, because they’re in-house experts at what they do.” – Anthony (15:46)
- “For an incident response plan to be good, you need to test it and make sure that the decision-makers are in the loop.” – Anthony (16:03)
- “Nothing’s a silver bullet but you can help mitigate potential exposure.” -Anthony (16:50)
ABOUT OUR GUEST:
An insurance professional with 25 years of experience in law and a wide variety of insurance-related positions in North America, Anthony has handled thousands of cyber and privacy matters and frequently speaks and writes on legal/insurance related issues. He has also managed teams handling a variety of lines of business including Cyber, Healthcare, Technology, Media, Employment Practices Liability, Errors & Omissions and Directors & Officers liability. Anthony is a graduate of UCONN Law School and a member of the Connecticut bar.