54:45Cet enregistrement n'est pas encore disponible.
Panel : Who Do You Know – Getting to know key partners in cybersecurity breach response
Télécharger les ressources
Catégories
À propos de cette session
Patrick Bourk, courtier en assurance chez Navacord, anime un panel avec l'avocate breach coach Julie Himo, de Torys, et l'agente de la GRC spécialisée en cybercriminalité Lina Dabit, sur qui appeler lors d'une brèche. Ils retracent les tendances des rançons : paiement moyen d'environ 390 000$ au premier trimestre 2024, les petites organisations (11 à 1000 employés) subissant la majorité des attaques, et un virage vers le vol de données sans chiffrement, l'exfiltration seule évitant de déclencher des alarmes alors que la donnée est devenue une marchandise négociable. Himo décrit le rôle de quart-arrière du breach coach, retenant juricomptables, négociateurs et relationnistes sous privilège légal, et recommande désormais d'appeler la police tôt, malgré une frustration passée devant la lenteur des réponses. Dabit corrige des idées fausses sur la saisie de matériel, décrit un parcours de signalement qui dépend de la juridiction, entre police municipale, unités provinciales et centre national de coordination, et prévient que payer une rançon ne garantit pas la confidentialité des données, citant un cas de double extorsion dans le secteur de la santé aux États-Unis. Les deux insistent sur le faible taux d'adoption de l'assurance cyber malgré la baisse des primes après un ratio de sinistralité lourd en 2020-2021, et terminent sur le risque d'hypertrucage par IA et le taux d'échec d'environ 60% en un an pour les petites entreprises frappées.
When cybersecurity incidents happen, time is of the essence for companies that have been compromised. Knowing who to call and how to pay for the fallout can be critical. Welcome to how insurance, breach coach lawyers and law enforcement can play a vital part in cybersecurity breach response. From financial backing to legal advice to law enforcement support, these key constituents can become a breached company's life line. In this session you will learn how the cyber insurance community supports cybersecurity breach response and how some of the critical partners play a vital role in this response, including breach coach lawyers and law enforcement.
À retenir
- Bâtir la liste de contacts d'intervention avant la crise, pas pendant : savoir à l'avance quel avocat, quel fournisseur de juricomptabilité, quel négociateur et quel corps policier local appeler.
- Faire transiter l'enquête et les signalements par un avocat externe pour que le plus possible soit couvert par le privilège avocat-client avant qu'un litige ultérieur ne s'en serve contre vous.
- Signaler les incidents aux forces de l'ordre même sans décision de paiement en suspens; une tentative d'intrusion reste un crime et alimente le renseignement qui aide d'autres cibles du secteur.
- Ne pas présumer que payer une rançon garde les données privées : des cas connus de double extorsion montrent que les attaquants ont quand même publié les données après paiement.
- Ne pas croire qu'une petite taille protège : les entreprises de 11 à 1000 employés subissent la majorité des attaques par rançongiciel, et environ 60% des petites entreprises attaquées font faillite dans l'année.
Conférenciers
Patrick Bourk
Patrick is a lawyer and specialty commercial insurance expert with a passion for helping companies and professionals with their specialty insurance and risk management needs. As a specialty insurance expert, he collaborates with clients to build and… Lire la suiteRéduire
Patrick is a lawyer and specialty commercial insurance expert with a passion for helping companies and professionals with their specialty insurance and risk management needs. As a specialty insurance expert, he collaborates with clients to build and support the strategic direction of their cyber liability insurance needs. Patrick helps shape business development and client experience while also providing technical expertise in the analysis, negotiation, and placement of these coverages. Patrick’s cyber liability insurance practice also includes advising clients on how best to align breach response planning with insurance and risk mitigation solutions. He also provides claims expertise and assists clients by managing and advocating on their behalf. Patrick is currently the Cyber & Professional Lines Practice Leader for Navacord, Canada's fastest growing insurance brokering organization that owns and partners with over 65 insurance brokerage firms. Patrick also serves as a Strategic Advisor to NetDiligence, a consulting firm specializing in cyber risk readiness and response services to the insurance industry. NetDiligence publishes an annual Cyber Claims Study and hosts annual Cyber Risk Insurance Summits in Philadelphia, California, Toronto and Florida.
Julie Himo
Julie Himo advises national and international clients on privacy and cyber security related matters. She acts as breach coach and has been appointed on numerous insurers panels. She has handled a large number of data and security breaches of all… Lire la suiteRéduire
Julie Himo advises national and international clients on privacy and cyber security related matters. She acts as breach coach and has been appointed on numerous insurers panels. She has handled a large number of data and security breaches of all types, many with international impacts and has coordinated notification and regulatory filing efforts in multiple countries. She also conducts strategic risk and privacy impact assessments and advises on a wide variety of Canadian privacy issues, including in the context of class actions. Ms Himo is also a seasoned commercial litigator, having handled over the past 25 years numerous commercial disputes in a wide variety of fields, including bankruptcy and insolvency and corporate and securities matters, commercial fraud, asset tracing and shareholder disputes. She also has considerable experience in extraordinary remedies such as seizures and injunctions.
Lina Dabit
Lina Dabit joined the RCMP in 1994 and started her career in BC working a variety of duties ranging from uniform patrol, drug section, major crime, intelligence, and border integrity. After transferring to Ontario in 2008, she focused on organized… Lire la suiteRéduire
Lina Dabit joined the RCMP in 1994 and started her career in BC working a variety of duties ranging from uniform patrol, drug section, major crime, intelligence, and border integrity. After transferring to Ontario in 2008, she focused on organized crime, national security and established the RCMP interview team in Ontario. She was commissioned in 2017 as commander of the Toronto Air Marshal Unit. Since 2021, she has led the Cybercrime Investigative Team and is building an innovative operational Cyber hub focused on collaboration between federal, international and private sector partnerships.
