Alonna Williams - Mckellar

What happens when the familiar faces of trusted clients, coworkers, and peers turn out to be AI-generated imposters? In this episode of The Cyber Periscope, Pamela Signorello sits down with Nate Lovett of Wiley's Cyber Insurance practice to dissect the rise of AI-driven cybercrime. Together, they explore why organizational defenses are lagging, how insurers are adapting policy language, and what this next wave of digital crime means for risk management. Listen now: https://bit.ly/3KQPfRc #CyberInsurance #ArtificialIntelligence #RiskManagement

25

Bad code isn't a cyber risk. If a client takes a hit because your software failed, that's a professional liability claim, not a data breach. https://lnkd.in/gTsvMXNc

1

Cyber security remains an important issue for organizations of all sizes, and requires understanding the root cause of incidents. #cybersecurity #rootcause #risk https://lnkd.in/gBBCEaF6

2

Cyber insurance is getting harder to obtain. And much harder to justify. Insurers are asking tougher questions about incident readiness, response coordination, and operational resilience... not just your security controls. The reality? Having a written incident response plan isn’t enough anymore. Underwriters increasingly want evidence that your organization can actually activate, coordinate, and document a response during a real cyber crisis. Organizations that demonstrate strong incident preparedness are often viewed as lower risk, which can influence premiums, coverage terms, and overall insurability. That’s exactly what we explore in our latest blog: • What cyber insurers are really looking for during underwriting • Why incident readiness is now a core compliance requirement • The operational gaps most organizations still have • How security teams can prove readiness, not just claim it If cyber insurance is part of your risk strategy (and for most organizations it is), this is a conversation security leaders can’t ignore. Check out the full guide: https://lnkd.in/eAEGz2eN

12

Digital forensics keeps evolving because the tech behind it never stops changing. New software, new methods, and constant updates make it possible to stay ahead of modern devices and uncover evidence that once felt out of reach. Learn how RISS Centers are innovating law enforcement support: defenseforensic.com #DigitalForensics #TruthInData #MobileForensics #VehicleForensics #ForensicTools

9

What should organizations be doing now to prepare for the California Consumer Protection Act (CCPA) Cybersecurity Audit requirements? Managing Director Ryan Smyth explains below. 

41

CareOregon and Health Share of Oregon have notified certain patients about a data breach and potential insurance fraud. Andover Eye Associates has identified a breach of its email environment. https://zurl.co/9mAku

3

Threat actors accessed and copied sensitive personal data from San Joaquin County court systems in October 2024, exposing individuals to identity theft and financial fraud. This breach necessitates immediate action from security teams. Organizations must proactively monitor for fraudulent activity and offer identity protection services to affected individuals. 🔒 #cybersecurity #databreach https://lnkd.in/g9cNnsBM

4

Cyber insurance underwriters aren’t buying “we’re secure” anymore. They want proof. If you’re renewing (or applying) this year, these are the controls that most often move the needle on approval, limits, and premiums: Mini-checklist (what they verify): 1) MFA everywhere (especially admin + email) 2) EDR on all endpoints (and monitored) 3) Backups that are immutable/offline + restore tests 4) Vulnerability management with patch SLAs 5) Least privilege / controlled admin access 6) Incident Response plan + tabletop exercise Tip: it’s not just having these: it’s being able to show evidence (reports, screenshots, logs, test results). Which one is your biggest gap right now: MFA, backups, vuln management, or IR planning? Comment below. Follow IA-Tech Center for practical security guidance, and visit ia-techcenter.com to get insurance-ready with confidence.

1

As the @NetDiligence Cyber Risk Summit continues today, conversations are drilling into incident playbooks and data in practice. Sessions are looking at how teams manage large‑scale data review, coordinate carriers and counsel under time pressure and adjust coverage and claims strategies as the threat landscape shifts. The peer‑to‑peer examples make it a strong place to stress‑test your own approach. Stop by and say hello. For more on the program: https://bit.ly/4maxLgG

8

Your cyber insurer is now your toughest security reviewer. Applications and renewals used to be a few yes/no questions. Now carriers want screenshots, logs, and policies before they’ll even quote. Most SMBs are getting asked to PROVE they have: - MFA on email, VPN, admin + key SaaS apps - EDR/XDR on every endpoint, not just the servers - Encrypted, off-site / immutable backups with recent restore tests - A written + tested incident response plan (tabletop or drill notes) And here’s the painful part: If you *say* you have a control and they later find out you didn’t (or it wasn’t enforced on the impacted account), you’re giving them grounds to deny the claim. We’re seeing three common gaps: 1️⃣ MFA is “on” for most people, but there are quiet exceptions for executives, vendors, or legacy apps. 2️⃣ Backups exist, but nobody has tried a full restore in the last 6–12 months. 3️⃣ There’s an “incident response plan” in a PDF, but no proof anyone has ever rehearsed it. Cyber insurance isn’t replacing cybersecurity. It’s grading it. If your renewal is inside 90 days and you’re not sure you could pass an underwriter’s sniff test, that’s your real risk window. 👇 Want a simple 90‑day “insurance readiness” checklist mapped to what carriers actually ask for? Send us a DM for more info! #CyberInsurance #CyberSecurity #Ransomware #BusinessContinuity #RiskManagement #SMB #CMMC #NIST800171 #GovCon #DefenseIndustry #MSP #MFA #EDR #Backups #GainSide

7

1 Comment

Cybersecurity is no longer optional for Ventura County businesses. From phishing emails and ransomware attacks to weak passwords and outdated systems, cyber threats are becoming more common across Ventura, Oxnard, Thousand Oaks, and Camarillo. Many small and mid-sized businesses assume they’re too small to be targeted — but in reality, they’re often the most vulnerable. A single cyber incident can disrupt operations, expose sensitive customer data, and create serious compliance risks under California privacy laws like CCPA and CPRA. That’s why we created a practical Cybersecurity Guide specifically for Ventura County businesses. Inside the guide, you’ll learn: • Common cyber threats affecting local businesses • Email and cloud security best practices • Data backup and ransomware protection strategies • California cybersecurity and data privacy considerations • Long-term cybersecurity planning for business resilience Strong cybersecurity is not just about protection — it’s about business continuity, trust, and long-term growth. Read the full guide here: https://lnkd.in/gHRusXY3 Have questions or need reliable IT support? Get in touch today through the link in our bio. 877-707-TECC info@securetecc.com securetecc.com Proudly based in Ventura County, serving Santa Paula, Ventura, Oxnard, Camarillo, Thousand Oaks, Santa Barbara, Fillmore, Hollywood, Beverly Hills, Pasadena, and Burbank. #Cybersecurity #VenturaCounty #ManagedITServices #BusinessCybersecurity #ITSupport #OxnardBusiness #ThousandOaksBusiness #SecureTECCSolutions #CaliforniaBusiness

2