NY Cyber Security Surveys On Way
New York recently announced that carriers are required to assess the data security requirements of their active producers in New York. These security requirements include establishing an information cybersecurity program, adopting security controls to protect nonpublic information from cybersecurity threats and reporting cybersecurity events.
To comply with the regulation, The Standard will email risk assessment surveys to all New York producers — and agencies with New York producers. We’ll send two emails. The first will be sent from producersrvcsteam@standard.com and will notify the producers to expect a survey soon. The actual survey will be sent from archer_noreply@standard.com. Producers will log into the Archer system to complete the survey. We ask that producers complete it within two weeks.
We’ll send the surveys in batches. The first batch was sent earlier this week. We’ll stagger future batches over the next few months until late August.
Exemptions
Producers may qualify for a limited exemption under the regulation. Possible exemptions can be found in section 500.19 of the regulation. Producers must file a Notice of Exemption with the NY Department of Financial Services to qualify for the exemption.
If you have any questions, please reach out to Producer Services Contract Manager Chris Sawyer at cmsawyer@standard.com.
For Producers Only