NAIC Insurance Data Security Model Law (MDL-668)
Section 4H to 4I: Incident response plan and annual certification – NAIC Insurance Data Security Model Law (MDL-668)

NAIC Insurance Data Security Model Law (MDL-668) 4H(1): Establish a written incident response plan

What does 4H(1) require?

Within its Information Security Program, every Licensee sets up a written incident response plan whose purpose is quick response to, and recovery from, any Cybersecurity Event that undermines the integrity, confidentiality or availability of Nonpublic Information it holds, of its Information Systems, or of the ongoing operation of any part of its business.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Section 4H to 4I: Incident response plan and annual certification – NAIC Insurance Data Security Model Law (MDL-668)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NAIC Insurance Data Security Model Law (MDL-668) controls