Kentucky Becomes 21st State to Adopt Model Cyber Security Law for Insurers
The steps that licensees must take include developing a written cybersecurity program; investigating and reporting cyber events within three days to the state insurance commissioner; conducting risk assessments; and designating a person in the company to be responsible for information security.