Educause Security Discussion
mailing list archives
Re: IT Security Insurance
From: Chad McDonald <chad.mcdonald () GCSU EDU>
Date: Tue, 21 Aug 2007 11:41:55 -0400
I'm sure it has its place, but I really only see value in providing
financial protection against lawsuits should there be a breach. I
suppose you would need to examine what the policy is insuring you
against. We haven't looked into this and I really on first glance don't
see a great value unless the cost is very low.
Chad McDonald, CISSP, CISA
Chief Information Security Officer
Georgia College & State University
Email chad.mcdonald () gcsu edu
During our insurance renewal process this year we were presented with
the option of adding a IT Security policy. In the past, we did not see
a lot of value in the policies but wanted to review the current
landscape to see if that assessment has changed.
Has anyone purchased one of these policies?
If so was the purchase a result of a recommendation by the security staff?
Have you used the policy and if so to what benefit was the policy?
I appreciate an insight into this topic.
Information Security Officer