NAIC Insurance Data Security Model Law (MDL-668)
Section 5: Investigation of a Cybersecurity Event – NAIC Insurance Data Security Model Law (MDL-668)

NAIC Insurance Data Security Model Law (MDL-668) 5A: Prompt investigation of an actual or suspected Cybersecurity Event

What does 5A require?

As soon as the Licensee finds out that a Cybersecurity Event has happened or might have happened, a prompt investigation is carried out, either by the Licensee itself or by an outside vendor or service provider it has appointed to act for it.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Section 5: Investigation of a Cybersecurity Event – NAIC Insurance Data Security Model Law (MDL-668)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll NAIC Insurance Data Security Model Law (MDL-668) controls