New York's new cyber security regulations are putting a strain on insurers and brokers as they move toward compliance with rules designed to improve cyber security among both “covered entities” and their vendors.
Firms have been assessing their cyber security organizational structure and determining the appropriate placement and reporting lines of the CISO. This includes special attention being paid to the independence of the CISO.