Obama administration is floating idea that the nation’s critical infrastructure operators would more likely adopt voluntary IT security best practices if the government engages the insurance industry to help develop the cybersecurity framework. The White House cybersecurity coordinator says insurance carriers would bring extensive knowledge of the effectiveness of specific cybersecurity practices. A survey of chief risk officers and chief information security officers says only 31 percent of companies in the U.S. carry cybersecurity insurance, although 39 percent plan to purchase a policy in the next 12 months. The final version of the Cybersecurity Framework is due in February.”]
Source: https://www.cuinfosecurity.com/cybersecurity-framework-making-work-a-5974