View this article online: https://www.insurancejournal.com/news/national/2015/05/01/366457.htm

AIG Enhances Cybersecurity Services for Cyber Risk Management Program

American International Group has formed new partnerships with cybersecurity experts to expand the risk mitigation and prevention services it offers cyber insurance clients.

The partnerships include: K2 Intelligence, BitSight Technologies, RSA, and Axio Global. Services from these partners complement AIG’s market leading CyberEdge risk management and insurance product, which helps clients manage the expanding threat of cybersecurity attacks and failures.

Through these partnerships, AIG CyberEdge policyholders can access pre-breach threat intelligence, governance tools, and the latest practices to help gain a holistic understanding of their cybersecurity exposure, including the responsiveness of their insurance program to a cyber attack.

AIG is making the following new services available to its CyberEdge clients:

• Customized threat intelligence from K2 Intelligence. Investigative and intelligence firm K2 Intelligence uses sophisticated intelligence gathering techniques and investigative tools to collect and analyze chatter about an organization from the deep web and dark net, hidden areas of the Internet where cyber criminals are known to conduct business. Companies can leverage K2 Intelligence’s proprietary tools and tradecraft to perform due diligence when engaging in a merger or acquisition, or to manage its overall cyber risk.
• BitSight Security Ratings by BitSight Technologies.Security rating firm BitSight analyzes externally observable data such as botnets, malware, and spam, to continually rate a company’s cybersecurity posture. When a company’s or a vendor’s security rating changes, it may be a signal that their systems have been compromised.
• Cybersecurity maturity assessment by RSA. The security division of EMC and developer of RSA Archer, a governance, risk, and compliance (GRC) provider, RSA leverages the NIST Cybersecurity Framework to help companies identify key functional areas of improvement to achieve an improved cybersecurity risk posture.
• Consultation with Axio Global, which develops complete cyber risk management programs. Through an approach that integrates exposure quantification, program evaluation, benchmarking, and the deployment of appropriate insurance coverage, Axio’s work addresses potential cyber losses, including physical damage, bodily injury, environmental damage, and other advanced forms of loss.

AIG’s qualified CyberEdge clients also continue to have access to the existing services of RiskAnalytics and IBM. RiskAnalytics provides clients with the active detection, intelligence, and shunning of IP addresses that are known cyber threats. RiskAnalytics also helps companies manage the human, legal and financial elements of risk, through training, policy and education. IBM provides qualified CyberEdge policyholders with pre-breach services to determine system vulnerabilities before they can be exploited and staffs a Cyber 911 hotline for CyberEdge policy holders.

AIG has been providing stand-alone cybersecurity insurance coverage since 1999 to help customers manage risks associated with data breaches by covering costs of forensic investigations, credit monitoring, reputation management, business interruption, and compliance with state breach notification laws.