3 ms·
We were looking at "cyber insurance" for our college and found out that we would be disqualified because every network connected device (even those on isolated
by protomyth 4y ago
We were looking at "cyber insurance" for our college and found out that we would be disqualified because every network connected device (even those on isolated networks) needs to have 2FA. Well, we have a network connected CNC machine at it has no provision for it. Another institution has the same machine and was denied. They tried every a lot of gyrations but got nowhere. Even a previous security audit would not help.
I get the feeling this is one of those rules setup to make sure they don't deal with small institutions with small IT departments or they really don't know how much the cost of insurance to them will be.
- gowld 4y agoThat rule would apply to larger IT depts too, though, right?
- protomyth 4y agoI would imagine they are in a better position to negotiate and have the resources to make strict rules the insurance company would like.
- Ansil849 4y ago> We were looking at "cyber insurance" for our college and found out that we would be disqualified because every network connected device (even those on isolated networks) needs to have 2FA. Well, we have a network connected CNC machine at it has no provision for it. How enforceable is this? Why could you not just leave that machine out of your inventory?
- protomyth 4y agoWell, if something goes wrong and we do an insurance claim, they would take a look and not pay our claim. I am not quite good enough to hide the CNC machine. Ask any homeowner how good these folks are at avoiding paying claims.