1
Cyber Security: The Growing Liability of
Handheld & Mobile Devices
2
About Advisen:
Advisen Ltd. is a privately-owned, independent and unbiased provider
of news, data and risk analytics to the commercial insurance industry.
Advisen’s mission is to deliver productivity and insight to
insurance professionals. Advisen brings greater success though
technology and data, revolutionizing the way the commercial
insurance industry functions. Our customers leverage the Advisen
platform, adding power to their proprietary ability and bringing
value to their clients.
4
Cyber Security: The Growing Liability
of Handheld & Mobile Devices
http://corner.advisen.com
• White Paper:
The Liability of Handheld & Mobile
Devices
• Copy of these slides
Today’s Moderator
David Bradford- President, Research &
Editorial Group, Advisen Ltd.
Today’s Panelists
Larry Collins, Vice President, E-Solutions Risk
Engineering, Zurich NA
John Mullen, Parter, Nelson Levine de Luca &
Hamilton
Today’s Panelists
Catherine Mulligan, Senior Vice President, Zurich NA
Catherine has specialized in the risk management and risk transfer issues around technology, Errors & Omissions, Intellectual Property, and Security & Privacy for 15 years as both an underwriter and a broker.
Catherine is a Senior Vice President of Zurich North America, where she is the national underwriting manager for Specialty E&O. The group handles Errors & Omissions, Security & Privacy, and Employed Lawyers.
Prior to Zurich, Catherine was an AVP at The Chubb Group of Insurance companies where she was a regional underwriting manager in the technology division, earning her Underwriting Specialist designation with a focus on E&O. She later spent 3 years as a broker at William Gallagher Associates in New York City, where she worked with technology and life sciences companies.
Catherine is a frequent speaker at events relating to Security & Privacy and Technology E&O issues. She contributes to articles and interviews for industry publications. She graduated cum laude from The College of the Holy Cross in Worcester, MA with a double major in English and Women's Studies.
Today’s Panelists
Larry Collins, Vice President, E-Solutions Risk Engineering, Zurich NA
Larry has more than 35 years of experience in Risk Engineering.. As the Vice President for E-Solutions, he leads a team that provides electronic services to tens of thousands of on-line customers. He’s appeared on TV on cyber security, has spoken on a number of panels and has published several articles and white papers on Security and Privacy related risk issues. He’s done many media interviews on that subject.
Larry’s team recently received the Arthur Quern Quality Awards from the Risk and Insurance Managers Society (RIMS) for their Accident Review Tool. The Arthur Quern Quality Award recognizes significant contributions within the field of risk management that raises the quality of products, processes, programs, systems and services. The recipient of the Arthur Quern Quality Award demonstrates innovation within the risk management industry and increased quality in products, services and enterprise risk management within an organization.
Today’s Panelists
John Mullen, Parter, Nelson Levine de Luca & Hamilton
John Mullen leads the Privacy and Data Security Practice at Nelson Levine de Luca & Hamilton. John focuses his practice on the defense of information security and
privacy matters, with particular emphasis on response to data loss events and suits. He serves as legal Breach Counsel, advising clients on issues related to IT forensics, customer and government notification and compliance, public relations, customer remedies, litigation hold/e-discovery requirements, and class action/multi-district litigation (MDL) issues. John frequently presents to insurers, insureds, risk managers and brokers, and has authored articles on the subject that have appeared in various publications including Best’s Review and Business Insurance.
What is driving the rapid growth in the use of handheld devices for business
purposes? What are some of the common business uses for these devices?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
Is losing a device the most significant data security threat?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
Are these devices more vulnerable to data breaches than other types of
computing and communication devices?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
Can you explain what near field communication technology is, and the risks it
presents?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
How vulnerable are these devices vulnerable to malware?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
Do employees commonly use their personal devices for business purposes?
Does this lead to increased vulnerabilities?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
Do government regulators and organizations such as PCI regulate data
security and breach events that exist with the new mobility of data?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
Given the risks posed by these devises, why do companies permit their use?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
What has been the response of corporate IT departments and others
responsible for data security?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
What risk management actions can improve the security of handheld devices?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
What should be the focus of a company’s mobile device policy?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
What should be done if a handheld devise housing or accessing sensitive
information is lost?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
What insurance coverages are available for mobile device data breaches?
John Mullen, Parter,
Nelson Levine de Luca & Hamilton
Dave Bradford- Advisen Ltd.
Catherine Mulligan,
Senior Vice
President, Zurich NA
Larry Collins, Vice
President, E-Solutions Risk Engineering, Zurich NA
24
25
Upcoming Advisen Webinars
Visit
http://corner.advisen.com/advisen_webinars.html
for the 2012
Webinar Schedule
The Reputational Risk of a Data Breach
Tuesday, September 25, 2012 at 11am EDT
Business Interruption-Business Income & Supply
Chain Risks
26
Upcoming Advisen Conferences
Visit
http://corner.advisen.com/advisen_conference.html
for the 2012
Webinar Schedule
Management Liability Insights Conference
Date: Thursday Septmeber 20, 8:00 AM EDT
Location: McGraw Hill Conference Center, NYC
Cyber Liability Insights Conference
Date: Wednesday October 24, 8:00 AM EDT
Location: Bridgewaters, NYC
27