Robert Ven

🚨 QBE Insurance Group predicts a 40% surge in ransomware incidents by 2026. This is a clear warning for businesses of every size. As cybercriminals use AI tools, exploit cloud vulnerabilities, and target third-party providers, traditional "detect and respond" strategies are struggling to keep up. Once a threat is detected, it is often too late and the damage is already done. Our latest blog post explores QBE’s findings and explains why now is the time to rethink cybersecurity. The shift toward "isolation and containment" is no longer optional. It is essential to keeping operations running even when attackers slip past the perimeter. Read the full post to learn what is driving the surge and how business leaders can strengthen their defenses before becoming the next headline. 👉 https://buff.ly/IvGRunK #CyberSecurity #Ransomware #DataProtection #EndpointSecurity #SmallBusinessSecurity #AIThreats #CyberAwareness #BusinessContinuity #AppGuard #AppGuardistheAnswer

3

Identity risk is the most common entry point for enterprise breaches, and yet it remains one of the hardest risks to quantify in financial terms. We heard from many folks at last week's FS-ISAC Spring Summit that risk quantification is missing from reports to executives and company board of directors. Enter the FAIR report, translating qualitative risk (high/med/low) into financial loss estimates (ALE $$) that executives can evaluate and act on. Paired with an IVIP like Axiad Mesh, you can see between the gaps of your existing tools:   • Orphaned accounts from long-gone contractors.   • Shadow OAuth permissions granted to third-party apps.   • Temporary "hackathon" access that never got revoked. Quantification isn't just about the number; it's about the return on investment. When you quantify risk in business terms, you turn a security "cost center" conversation into a strategic "risk reduction" conversation. Get your 𝗙𝗥𝗘𝗘 FAIR Report today https://lnkd.in/e3isvHWA Questions? Book time with our team at RSAC and we will show you how this works in your own systems. https://lnkd.in/eg8Hk55G

5

A product design failure can destroy a company, how can this be prevented or the impact minimized?   In our latest edition of The Strategic Risk Mind Podcast by Fortify Risk Management, LLC host Joe Anderson, CPCU, AFSB, ARM, CBRA interviews David Smith, Owner of Alpine Engineering & Design, Inc. He has bachelor’s and master’s degrees in mechanical engineering, and an MBA. He is a licensed professional engineer (PE) and loves product development and patent work. He is also a certified safety professional (CPS) and is passionate about using risk assessments to develop safe products.   In the attached short, we discuss preventative assessments and expert witness services to avoid accidents that harm your company and clients and or protect your company from lawsuits (see the clip below). Here is a sampling of other topics we cover in the full Podcast (linked below): - Risk assessments on equipment and products - Engineering risks - Reverse engineering of product liability A question Dave answers: If using a big brand component to for your final product, does this negate the need for risk and safety assessments? If you are interested in working with Dave Smith or Fortify Risk CROs, you can set up an initial consultation here: https://lnkd.in/gxeWhUZX   YouTube: https://lnkd.in/gi9FaFSG Spotify: https://lnkd.in/g3fm3h9w Apple Podcasts: https://lnkd.in/g64cTgfH #workplacesafety #lossreduction #safetyproblemsolving #riskmanagement #chiefriskofficer #businessresiliency #productliability #patentinfringement #expertwitnessservices #reverseengineering Manny Chavez. Thomas Daggett. Kobe Mower. Hannah Anderson. Stewart Hyndman. Tim Tucker, CPCU, ARM. Seth Uhlenkott. Natalie Shores. Terry Evans, CSP, ARM. Joe Anderson, CPCU, AFSB, ARM, CBRA.

4

1 Comment

Healthcare compliance is shifting from checklists to proactive oversight. Onspring’s Ryan Redman shares how automation and real-time monitoring strengthen third-party risk strategies. Read more: https://hubs.la/Q03JjKbH0 #HealthcareCompliance #GRC #ThirdPartyRisk

5

Credit unions are member-centric by mission. Yet ironically, the data schemas they navigate in Symitar, the industry's most widely adopted core system, are account-centric. In Symitar's architecture, the Account table connects to various dimensions, including Members (see left figure). This creates complexity: a member can hold multiple accounts, and an account can link to multiple members. De-normalizing this structure inevitably duplicates data. Consider a straightforward business question: "What are the top 10 zip codes by total account balance?" Answering this in Symitar requires iterating through non-empty balances and their associated accounts, enumerating each account's members and corresponding zip codes, then deduplicating the results -- a tedious script of 25–30 lines. Tursio normalizes the schema and handles symmetric aggregates to avoid duplication (right figure below). This makes data searchable and member insights accessible to stakeholders, thus supporting a member-centric mission. #CreditUnions #Symitar #TursioAI #SchemaWars #StructuredDataSearch

35

𝗠𝗼𝘀𝘁 𝘂𝗻𝗱𝗲𝗿𝘄𝗿𝗶𝘁𝗶𝗻𝗴 𝗔𝗜 𝗱𝗼𝗲𝘀𝗻’𝘁 𝗳𝗮𝗶𝗹 𝗯𝗲𝗰𝗮𝘂𝘀𝗲 𝘁𝗵𝗲 𝗺𝗼𝗱𝗲𝗹𝘀 𝗮𝗿𝗲 𝘄𝗲𝗮𝗸. 𝗜𝘁 𝗳𝗮𝗶𝗹𝘀 𝗯𝗲𝗰𝗮𝘂𝘀𝗲 𝘀𝘆𝘀𝘁𝗲𝗺𝘀 𝗱𝗼𝗻’𝘁 𝗲𝗮𝗿𝗻 𝘁𝗿𝘂𝘀𝘁. Underwriting intent isn’t a rule, a score, or a configuration. It’s shaped in real time by portfolio pressure, risk appetite, timing, and human judgement. When technology tries to freeze that intent into static logic, confidence drops. Accuracy degrades. And speed disappears as underwriters are forced back in to “fix” the system. The uncomfortable truth is this. Turning underwriting judgement into fast, repeatable decisions isn’t just an AI challenge. It’s a systems challenge. Trusted underwriting platforms know when to decide, when to slow down, and when to escalate. They make risk decisions faster without removing judgement. They improve accuracy without hiding complexity. And they give underwriters confidence in every outcome, not just the ones that demo well. That’s the difference between automation that looks impressive, and platforms that underwrite at scale. #Underwriting #InsurTech #SpecialtyInsurance #Concirrus

15

ACH payments should flow smoothly, yet R03/R04 returns from invalid accounts drain revenue, waste time, and affect the customer experience, not in a good way. Ai Validate BD from Accelitas: – Validates 90%+ of U.S. bank accounts – Eliminates costly return codes – Protects revenue & customer experience 💡 See the impact with a data test drive: https://hubs.la/Q03JPHPt0 #ACHpayments #BankAccountValidation #CustomerExperience

7

“We lowered our cyber insurance costs by 10% in year one. In year two, we continued to lower our risk, increased our coverage by $2,000,000, and decreased cost by over 50%.” That’s what happened after a healthcare organization worked with CorePLUS to understand risk, prioritize mitigation, and align their security posture to what insurers and regulators expect. Real results are measurable, not just claimed. These are the kind of outcomes security and risk teams should be focused on. #CyberSecurity #CyberRisk #CyberInsurance #RiskManagement

4

The Cincinnati Specialty Underwriters Insurance Company has deployed Guidewire ClaimCenter on the Guidewire Cloud Platform as part of an effort to modernize its claims operations. The initial implementation covers workers’ compensation, with plans to extend the platform to commercial, excess and surplus, and personal lines of business. Company leaders noted early positive feedback from claims staff, citing improved usability, easier access to information, and better collaboration across teams. The deployment is expected to support operational efficiency, enable quicker rollout of new capabilities, and enhance the overall claims experience for policyholders. Read more here: https://lnkd.in/eX2Fp4Nn

4