Beyond Compliance: Building Cyber Resilience and Trust in the Age of AI
From Regulatory Complexity to Operational Resilience: Turning Cybersecurity and AI Compliance into Continuous Confidence.
Insurers face a growing set of overlapping cybersecurity and AI obligations. The NAIC Insurance Data Security Model Law (#668) and the NYDFS Cybersecurity Regulation (23 NYCRR 500) set expectations for security programs, asset inventories, and rapid incident notification in the U.S. The NAIC AI Model Bulletin adds governance requirements for AI used in underwriting, pricing, and claims. For insurers with European operations, the EU’s Digital Operational Resilience Act (DORA) adds ICT risk, incident reporting, and third-party oversight obligations. NIST CSF 2.0 gives many of these requirements a common structure.
This roundtable will examine where those obligations converge, where the operational gaps are, especially in asset visibility, third-party and AI oversight, and compressed notification timelines, and how ServiceNow help leaders turn compliance requirements into continuous, evidence-backed operations.