What your next cyber insurance renewal will demand

In this Help Net Security video, Michael Loewy, co-founder, Tide Foundation, explains how cyber insurance is rewriting security programs at renewal time. Insurers want more questionnaires, more evidence, and more attestations, because the market is moving from trusting your answers to verifying them. Loewy argues that compliance is not security, and that a control which is declared can be partial, misconfigured, or bypassed when it matters.