Re: IT Security Insurance

[Chad McDonald <chad.mcdonald () GCSU EDU>]

I'm sure it has its place, but I really only see value in providing
financial protection against lawsuits should there be a breach.  I
suppose you would need to examine what the policy is insuring you
against. We haven't looked into this and I really on first glance don't
see a great value unless the cost is very low.

Chad McDonald, CISSP, CISA
Chief Information Security Officer
Georgia College & State University
Phone   478.445.4473
Cell    478.454.8250
Fax     478.445.1202
Email   chad.mcdonald () gcsu edu

> During our insurance renewal process this year we were presented with
> the option of adding a IT Security policy.  In the past, we did not see
> a lot of value in the policies but wanted to review the current
> landscape to see if that assessment has changed. 
>  
> Has anyone purchased one of these policies?
>  
> If so was the purchase a result of a recommendation by the security staff?
>  
> Have you used the policy and if so to what benefit was the policy?
>  
> I appreciate an insight into this topic.
>  
> Jon Allen
> Information Security Officer
> Baylor University
>