Section 4H to 4I: Incident response plan and annual certification – NAIC Insurance Data Security Model Law (MDL-668)
NAIC Insurance Data Security Model Law (MDL-668) 4I: Annual certification to the Commissioner of the domiciliary State
What does 4I require?
Each year by 15 February, every insurer domiciled in the State files with the Commissioner a written statement certifying that it complies with Section 4. For five years it keeps, available for examination, all the records, schedules and data that support the certification. Where it has found areas, systems or processes that need material improvement, updating or redesign, it documents them together with the remediation it has planned and is carrying out, and keeps that documentation available for inspection.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
Other controls in Section 4H to 4I: Incident response plan and annual certification – NAIC Insurance Data Security Model Law (MDL-668)