Readiness Authority
LightNews LightNews
banner
readinessauthority.org
Readiness Authority
@readinessauthority.org
37 followers 39 following 41 posts
Practical guidance on cyber insurance, business continuity and disaster recovery.
Glossary, vendor directory and webinars at readinessauthority.org
Posts Replies Media Videos
Pinned
readinessauthority.org
Readiness Authority @readinessauthority.org · 22d
Readiness Authority: Practical guidance on cyber insurance, business continuity and disaster recovery.

Here we share terms from our glossary, plus our vendor directory and webinars.

readinessauthority.org

#BusinessContinuity #CyberInsurance
readinessauthority.org
AI Won't Break Your Defenses. Your Backlog Will.

#BusinessContinuity #CyberInsurance
AI Won't Break Your Defenses. Your Backlog Will.
AI enhances ransomware speed, but known vulnerabilities and technical debt pose the greatest threat. Addressing these is critical to strengthening defenses.
readinessauthority.org
November 4, 2026 at 8:02 PM
readinessauthority.org
Term of the day: CSF Organizational Profile

A CSF Organizational Profile is a tool used to describe where an organization currently stands on cybersecurity and where it wants to be...

Full definition: readinessauthority.org/glossary/csf-organizational-profile

#BusinessContinuity #CyberInsurance
CSF Organizational Profile. A CSF Organizational Profile is a tool used to describe where an organization currently stands on cybersecurity and where it wants to be, expressed in terms of the outcomes defined in the NIST Cybersecurity Framework. It is a resilience and security planning mechanism, not an insurance policy term, and it does not by itself transfer risk or guarantee any particular level of protection. Organizations typically create both a Current Profile and a Target Profile to identify gaps and prioritize improvements.
November 4, 2026 at 4:02 PM
readinessauthority.org
A Coverage Gap Review Template for Teams Without a Risk Manager

#BusinessContinuity #CyberInsurance
A Coverage Gap Review Template for Teams Without a Risk Manager
A coverage gap review template guides middle market companies lacking risk managers through identifying insurance exposures and improving risk management processes.
readinessauthority.org
November 3, 2026 at 8:02 PM
readinessauthority.org
Term of the day: CISA Cybersecurity Performance Goals

The CISA Cybersecurity Performance Goals are a voluntary set of recommended cybersecurity practices published by the...

Full definition: readinessauthority.org/glossary/cisa-cybersecurity-performance-goals

#BusinessContinuity #CyberInsurance
CISA Cybersecurity Performance Goals. The CISA Cybersecurity Performance Goals are a voluntary set of recommended cybersecurity practices published by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to help organizations, particularly those in critical infrastructure, improve their defenses. They are meant to work for organizations of all sizes and levels of cybersecurity experience by identifying a prioritized subset of practices rather than a complete security program. They are guidance and best-practice goals, not an insurance policy term and not a mandatory regulation on their own.
November 3, 2026 at 4:03 PM
readinessauthority.org
Three Flaws, One Root Shell: An Ivanti Chain Teardown

#BusinessContinuity #CyberInsurance
Three Flaws, One Root Shell: An Ivanti Chain Teardown
An Ivanti exploit chain combined three flaws to gain root access, exposing risks in patch management and vulnerability disclosure timing.
readinessauthority.org
November 2, 2026 at 8:02 PM
readinessauthority.org
Term of the day: Business Interruption Loss Calculation

Business interruption loss calculation is the process of working out how much income a business lost while it was...

Full definition: readinessauthority.org/glossary/business-interruption-loss-calculation

#BusinessContinuity #CyberInsurance
Business Interruption Loss Calculation. Business interruption loss calculation is the process of working out how much income a business lost while it was unable to operate normally, so that amount can be claimed under an insurance policy. It typically looks at the profit the business would have earned plus certain ongoing costs it still had to pay during the shutdown. How the loss is defined and measured depends on the specific policy wording, and in many traditional policies the interruption must stem from covered physical loss or damage to property before any loss is payable.
November 2, 2026 at 4:02 PM
readinessauthority.org
Stolen Platform Secrets: A Rotation and Detection Runbook

#BusinessContinuity #CyberInsurance
Stolen Platform Secrets: A Rotation and Detection Runbook
The Northflank breach underscores the critical need for rapid credential rotation and detection to mitigate AI key theft and cloud platform risks.
readinessauthority.org
November 1, 2026 at 8:01 PM
readinessauthority.org
Term of the day: Business Interruption Loss

A business interruption loss is the income a business fails to earn when its operations are suspended, along with certain continuing...

Full definition: readinessauthority.org/glossary/business-interruption-loss

#BusinessContinuity #CyberInsurance
Business Interruption Loss. A business interruption loss is the income a business fails to earn when its operations are suspended, along with certain continuing expenses it still has to pay during the shutdown. It is a first-party loss, meaning it concerns the insured's own financial losses rather than liability owed to others. In many traditional property policies this loss is only covered when it results from covered physical loss or damage to property, though coverage always depends on the specific policy wording.
November 1, 2026 at 4:02 PM
readinessauthority.org
Precautionary Shutdowns: Will Your Cyber Policy Pay?

#BusinessContinuity #CyberInsurance
Precautionary Shutdowns: Will Your Cyber Policy Pay?
PHP2Shell flaws reveal critical cyber insurance gaps on precautionary shutdowns, urging brokers and policyholders to reassess coverage triggers and terms.
readinessauthority.org
October 31, 2026 at 7:01 PM
readinessauthority.org
Term of the day: Business Interruption Event

A business interruption event is an unexpected disruption that forces a business to stop or reduce its operations, causing it to lose...

Full definition: readinessauthority.org/glossary/business-interruption-event

#BusinessContinuity #CyberInsurance
Business Interruption Event. A business interruption event is an unexpected disruption that forces a business to stop or reduce its operations, causing it to lose income. Business interruption insurance is a type of first-party coverage that can help replace lost income and pay ongoing fixed expenses while the business is unable to operate normally. Whether a particular event is covered depends on the specific policy wording, including which perils or events the policy treats as triggering coverage.
October 31, 2026 at 3:02 PM
readinessauthority.org
Should You Isolate PHP Risk in Your Cyber Policy?

#BusinessContinuity #CyberInsurance
Should You Isolate PHP Risk in Your Cyber Policy?
PHP vulnerabilities create complex cyber risks affecting breach response, regulatory claims, and aggregation. Choosing the right insurance structure is vital.
readinessauthority.org
October 30, 2026 at 7:02 PM
readinessauthority.org
Term of the day: Business Interruption Coverage

Business interruption coverage is a type of insurance that helps replace the income a business loses when it cannot operate...

Full definition: readinessauthority.org/glossary/business-interruption-coverage

#BusinessContinuity #CyberInsurance
Business Interruption Coverage. Business interruption coverage is a type of insurance that helps replace the income a business loses when it cannot operate normally because of a covered event. It can also help pay ongoing fixed expenses and certain extra costs, such as operating from a temporary location, during the period the business is disrupted. It does not reduce the chance that a disruption will happen; it addresses the financial loss after one occurs.
October 30, 2026 at 3:03 PM
readinessauthority.org
Cyber Endorsements Won't Save You

#BusinessContinuity #CyberInsurance
Cyber Endorsements Won't Save You
More than half of cyber policies are endorsements, but they cover only a fraction of premiums, leaving many organizations exposed to significant cyber risk.
readinessauthority.org
October 29, 2026 at 7:02 PM
readinessauthority.org
Term of the day: Burning Cost

Burning cost is a way insurers and reinsurers use past claims to help set the price of coverage. In simple terms, it looks at how much has been paid out in claims...

Full definition: readinessauthority.org/glossary/burning-cost

#BusinessContinuity #CyberInsurance
Burning Cost. Burning cost is a way insurers and reinsurers use past claims to help set the price of coverage. In simple terms, it looks at how much has been paid out in claims relative to the amount being insured, and uses that historical experience to estimate a fair premium. It is a pricing tool based on loss history rather than a measure of resilience or a type of coverage.
October 29, 2026 at 3:03 PM
readinessauthority.org
Breach Data Is Now a Supply Chain Weapon

#BusinessContinuity #CyberInsurance
Breach Data Is Now a Supply Chain Weapon
AI transforms stolen breach data into exploitable intelligence, expanding the impact across supply chains and demanding new security strategies.
readinessauthority.org
October 28, 2026 at 7:01 PM
readinessauthority.org
Term of the day: Bricking Coverage

Bricking coverage is an optional feature in some cyber insurance policies that helps pay to replace or restore physical devices that a cyberattack has...

Full definition: readinessauthority.org/glossary/bricking-coverage

#BusinessContinuity #CyberInsurance
Bricking Coverage. Bricking coverage is an optional feature in some cyber insurance policies that helps pay to replace or restore physical devices that a cyberattack has rendered unusable, effectively turning them into a 'brick.' It addresses situations where hardware such as computers or connected devices no longer functions after an attack, sometimes because the device's low-level software (firmware) has been corrupted. Whether any given loss is covered depends on the specific policy wording, endorsements, and exclusions.
October 28, 2026 at 3:03 PM
readinessauthority.org
AI Risk Underwriting Questionnaire Template

#BusinessContinuity #CyberInsurance
AI Risk Underwriting Questionnaire Template
This AI risk underwriting questionnaire template guides insurers in evaluating AI tool usage, data flows, and liability to price cyber insurance accurately.
readinessauthority.org
October 27, 2026 at 7:01 PM
readinessauthority.org
Term of the day: Breach of Confidentiality

A breach of confidentiality happens when private information is disclosed to a third party without the consent of the person or entity it...

Full definition: readinessauthority.org/glossary/breach-of-confidentiality

#BusinessContinuity #CyberInsurance
Breach of Confidentiality. A breach of confidentiality happens when private information is disclosed to a third party without the consent of the person or entity it belongs to. It can occur accidentally or deliberately, and it violates the trust or legal obligations that require the information to be kept private. In some settings, such as healthcare, breaking confidentiality may be justified only in narrow circumstances, for example a severe threat to a patient or others or a legal mandate.
October 27, 2026 at 3:02 PM
readinessauthority.org
Waiver Costs Zurich $8.5M in Solar Claim Reversal

#BusinessContinuity #CyberInsurance
Waiver Costs Zurich $8.5M in Solar Claim Reversal
Zurich's $8.5M claim reversal shows how waiver in deductible classification can bind insurers, stressing the need for clear, consistent claims processing.
readinessauthority.org
October 26, 2026 at 7:01 PM
readinessauthority.org
Term of the day: Breach Response Costs

Breach response costs are the expenses a business incurs to manage and respond to a data breach or cyber incident, such as hiring forensic...

Full definition: readinessauthority.org/glossary/breach-response-costs

#BusinessContinuity #CyberInsurance
Breach Response Costs. Breach response costs are the expenses a business incurs to manage and respond to a data breach or cyber incident, such as hiring forensic investigators, lawyers, and crisis management specialists. In a cyber insurance policy, this is typically a first-party coverage, meaning it pays for the insured organization's own response expenses rather than claims brought by others. Whether specific costs are covered depends on the policy wording, and many policies require the insurer's prior approval before expenses are incurred.
October 26, 2026 at 3:02 PM
readinessauthority.org
Quest Diagnostics Shuts Down Quanum LSM: Why Speed Beats Certainty

#BusinessContinuity #CyberInsurance
Quest Diagnostics Shuts Down Quanum LSM: Why Speed Beats Certainty
Quest Diagnostics shut down Quanum LSM quickly after a breach, showing how fast incident response can limit damage and keep critical healthcare services running.
readinessauthority.org
October 25, 2026 at 7:02 PM
readinessauthority.org
Term of the day: Breach Notification Requirement

A breach notification requirement is a legal obligation to tell affected people (and sometimes regulators) when their personal...

Full definition: readinessauthority.org/glossary/breach-notification-requirement

#BusinessContinuity #CyberInsurance
Breach Notification Requirement. A breach notification requirement is a legal obligation to tell affected people (and sometimes regulators) when their personal or health information has been exposed or compromised. Different laws set their own rules about who must be notified, what counts as a breach, and how quickly notice must be given. It is a compliance duty triggered by an incident, not a form of insurance coverage or a security control that prevents breaches.
October 25, 2026 at 3:03 PM
readinessauthority.org
Post-Breach User Communication: A 48-Hour Playbook

#BusinessContinuity #CyberInsurance
Post-Breach User Communication: A 48-Hour Playbook
Capcom's data breach affecting over 11 million users highlights the critical need for rapid, tiered communication in the first 48 hours post-incident.
readinessauthority.org
October 24, 2026 at 7:02 PM
readinessauthority.org
Term of the day: Breach Coach

A breach coach is typically an attorney who specializes in data privacy and cybersecurity law and helps an organization respond to a data breach or cyber incident...

Full definition: readinessauthority.org/glossary/breach-coach

#BusinessContinuity #CyberInsurance
Breach Coach. A breach coach is typically an attorney who specializes in data privacy and cybersecurity law and helps an organization respond to a data breach or cyber incident. They act as a central coordinator, guiding the company's response and connecting it with resources such as forensic investigators and crisis management teams while helping it meet legal and compliance obligations.
October 24, 2026 at 3:03 PM
readinessauthority.org
Gottlieb & Associates PLLC filed 55% of complaints, up from 37% in August.

#BusinessContinuity #CyberInsurance
September 2026 website accessibility lawsuit report
148 federal website accessibility lawsuits were filed in September 2026 across 8 states. What the complaints alleged, who was sued, where, and by whom.
www.accessibility.com
October 23, 2026 at 7:20 PM