willistowerswatson.com

Anatomy of a Senior Living Cyber Breach

Managing Cyber Security in Senior Living

October 25, 2017

© 2017 Willis Towers Watson. All rights reserved.

willistowerswatson.com

Introduction

Objectives and Overview1. Describe cyber-breaches that senior living companies have encountered.2. State ways to manage a cyber-breach in a senior living company or community.3. Discuss the impact of cyber-breach insurance coverage on your ability to manage this

type of risk.

ModeratorDan Twersky, WTW, Cyber Insurance and ClaimsAdvocates for coverage on behalf of his clients in connection with claims reported under Financial and Executive (“FINEX”) lines of insurance.

2© 2017 Willis Towers Watson. All rights reserved. Proprietary and Confidential. For Willis Towers Watson and Willis Towers Watson client use only.

willistowerswatson.com

Panelists

Melissa Ventrone, Partner, Thompson CoburnChair of cybersecurity practice. Leads teams of first responders, including lawyers and forensic investigators, in cyber crisis situations. Represents clients in cybersecurity litigation and proactively managing data privacy and security risks.

Chet Phillips, Chief Information Officer, EnlivantProvides strategic oversight for all aspects of technology at Enlivant and also serves as the Chairman of the Technology Roundtable at Argentum.

Jeremy R. Henley, Vice President of Breach Services, ID ExpertsHeads up the identity protection services and provides direct oversight of the Employee Benefits and Affinity programs ID Experts offers to employers and associations via their network of brokers. Works with Cyber Liability insurance carriers and has developed key relationships with the federal government .

3© 2017 Willis Towers Watson. All rights reserved. Proprietary and Confidential. For Willis Towers Watson and Willis Towers Watson client use only.

willistowerswatson.com

What is so unique about senior living when it comes to cyber risk?

Easier targetsNot as quick to detect fraudInformation includes personal and medicalMany potential uses for fraudulent purposes

4© 2017 Willis Towers Watson. All rights reserved. Proprietary and Confidential. For Willis Towers Watson and Willis Towers Watson client use only.

willistowerswatson.com

Examples of Privacy and Security Events in Senior Living

Lessons Learned

5© 2017 Willis Towers Watson. All rights reserved. Proprietary and Confidential. For Willis Towers Watson and Willis Towers Watson client use only.

willistowerswatson.com

Are demands and lawsuits more common with a senior population?

Regulatory Standpoint

6© 2017 Willis Towers Watson. All rights reserved. Proprietary and Confidential. For Willis Towers Watson and Willis Towers Watson client use only.

willistowerswatson.com

Breach Response Objective

Help those affected Protect the companyMitigate the potential for legal and regulatory risk

7© 2017 Willis Towers Watson. All rights reserved. Proprietary and Confidential. For Willis Towers Watson and Willis Towers Watson client use only.

willistowerswatson.com

Extra Steps for a Breach Affecting mostly Seniors

More call center operatorsOnsite information centersAdditional language in the notification letterDifferent monitoring protection options Additional sign-up methods

8© 2017 Willis Towers Watson. All rights reserved. Proprietary and Confidential. For Willis Towers Watson and Willis Towers Watson client use only.

willistowerswatson.com

How and when does insurance fit in here?

Coverages provided under Cyber InsuranceReporting requirementsVendor choices

9© 2017 Willis Towers Watson. All rights reserved. Proprietary and Confidential. For Willis Towers Watson and Willis Towers Watson client use only.

willistowerswatson.com

Best Practices

Pre- incident planningBreach response

10© 2017 Willis Towers Watson. All rights reserved. Proprietary and Confidential. For Willis Towers Watson and Willis Towers Watson client use only.

willistowerswatson.com

Questions

11© 2017 Willis Towers Watson. All rights reserved. Proprietary and Confidential. For Willis Towers Watson and Willis Towers Watson client use only.