Wipfli logo

NAIC cybersecurity model rule implementation

Greg Foster
Nov 19, 2023

All business leaders are aware of cybersecurity risks, but those serving the insurance industry have unique challenges and face regulatory requirements and implementation timelines for the NAIC model rule that vary by state. In addition to the insurers themselves, these new data security rules also apply to most agencies, brokers and third-party administrators who are licensed by state insurance departments.

Join Wipfli partner Greg Foster, CPA and Tom Wojcinski, a leader in Wipfli’s cybersecurity and technology management practice, for an on-demand webinar that covered these requirements and the framework for a sound cybersecurity risk management strategy. The discussion will position you to help protect your business and customers.

In this webcast, they explored:

  • Unique cyber risks in the insurance industry.
  • Requirements of the NAIC’s model rule on cybersecurity.
  • Best approaches to implement and enforce the model rule provisions.
  • State adoption and implementation.

Intended audience: senior management, compliance officers, IT management, information security officers, IT auditors and operations managers for insurers and all other licensees who serve the insurance industry

Learn more about how Wipfli’s cybersecurity professionals can help ensure your organization’s compliance with the latest requirements. 

Author(s)

Greg Foster
CPA, Partner, Wipfli LLP and Wipfli Advisory LLC
Tom Wojcinski
Partner, Wipfli Advisory LLC
Are you prepared to meet your state's cybersecurity requirements for the insurance industry? 
Learn more

TOP PICKS

Jeff Olejnik
Jeff Olejnik 05/12/2026
Nation-state actors are increasingly launching cyberattacks on businesses and critical infrastructure. How should your organization prepare?
Anna Kooi
Anna Kooi 05/12/2026
Can traditional financial institutions avoid losing Gen Z to fintech?
Chris Janke
Chris Janke 05/12/2026
Physical penetration testing is the missing layer for stronger cybersecurity