The security landscape is changing rapidly.

UK GDPR requires organisations to implement appropriate technical and organisational measures to protect personal data. The new generation of regulation goes much further: DORA, NIS2, the UK Cyber Security and Resilience Bill and the EU AI Act require much broader governance of systems, resilience, suppliers, infrastructure and information assets of all kinds, including IP, confidential information, R&D, business plans and customer and supplier information. These standards will inform the yardstick courts apply when considering whether reasonable security measures were taken.

AI creates an additional risk. Attacks such as prompt injection can manipulate trusted AI systems and agents into accessing, disclosing or acting upon information without an attacker first defeating conventional perimeter security.

For managing agents this creates a double exposure:

• Protecting their own increasingly AI enabled underwriting, claims and operational systems; and

• insuring businesses exposed to the same emerging attacks, increasingly demanding security standards and potential liabilities

Are security controls, underwriting, policy wordings, guidance to insureds, pricing and accumulation management keeping pace with risks already inside businesses and on insurers’ books?

There will be an opportunity to put questions to the presenters at the end of the session.

Attendance is free but limited to 24 delegates.

Registration Simply complete the panel below and confirmation of your registration will be sent to your email address.