"Cybersecurity Insurance and Data Analysis Working Group Re-Envisioned to Help Drive Down Cyber Risk"
Nitin Natarajan, Deputy Director for the Cybersecurity and Infrastructure Security Agency (CISA), recently joined the Treasury Federal Insurance Office and the New York University Stern School of Business’ Volatility and Risk Institute at their conference on Catastrophic Cyber Risk and a Potential Federal Insurance Response, where he announced that CISA will relaunch the Cybersecurity Insurance and Data Analysis Working Group (CIDAWG). When the CIDAWG relaunches in December, the working group will collaborate with Stanford's Empirical Security Research Group, a research lab in Stanford's Computer Science Department, to correlate data with cybersecurity controls in order to better understand their effectiveness. CISA will request that working group members team up with Stanford to improve the analysis of aggregated, anonymized loss data and link it with the effectiveness of controls. This analysis will serve as a resource for insurers to inform their risk analyses, as well as for CISA to better understand whether the Cyber Performance Goals (CPGs) and the Secure by Design initiative are leading to reduced cyber risk exposure for organizations that implement them. This article continues to discuss the CIDAWG and its relaunch.
Submitted by grigby1