Data Compromise Underwriting Guidelines for Farmland/Nationwide Agribusiness Insurance Company

Transcription

1 Data Compromise Underwriting Guidelines for Farmland/Nationwide Agribusiness Insurance Company Originally Effective Revised Effective: 6/1/2016 The following sets forth the forms, rates and eligibility agreed by the Company and the Reinsurer and are incorporated by reference into Reinsurance Agreement Reference Number In the event of a conflict between the terms of the Reinsurance Agreement and the terms of the Underwriting Guidelines, the terms of the Underwriting Guidelines shall prevail. 1.

2 Table of Contents Farmland/Nationwide Agribusiness Insurance Company - COP... 3 Section I. General Rules and Premium Determination... 3 Section II. Forms... 4 Section III. Excluded Classes of Business... 5 Section IV. Document Updates... 5 Farmland/Nationwide Agribusiness Insurance Company Special Ag... 6 Section I. General Rules and Premium Determination Data Compromise Coverage... 6 Section II. Forms... 8 Section III. Excluded Classes of Business... 8 Section IV. Document Updates

3 Farmland/Nationwide Agribusiness Insurance Company - COP Original Effective Revision Effective 4/27/16 Eligibility: Section I. General Rules and Premium Determination Insureds, except those in a class of business listed in Exhibit III Excluded Classes, are automatically eligible for a DC Coverage limit of $100,000. Insureds are eligible for increased DC Coverage limits of $250,000, $500,000 or $1,000,000 subject to acceptable answers to Increased Limits Questionnaire below. DC Coverage limit changes may only be made upon the anniversary of the addition of the DC Coverage Form. If a Policy that was in compliance with the eligibility rules at the time of its issuance subsequently becomes non-compliant, that Policy will be covered under the Reinsurance Agreement until its expiration. Increased Limits Questionnaire Eligibility Questions for $250,000 Limit: If the answer to question 1 is YES, higher limits are NOT available. And / or If the answer to three (3) or more of the remaining questions (2-5) is NO, higher limits are NOT available. 1) Has your organization suffered a breach of personal information in the last 12 months? 2) Do you conduct background screens for prospective employees? 3) Is there a posted document retention/destruction policy in place? 4) Do you maintain regularly updated computer security measures, e.g. firewall, secured wireless connectivity, virus protection? 5) Are your employee, customer, and other physical records maintained in a secure environment with limited access? Eligibility Questions for $500,000 or $1,000,000 Limit: If the answer to question 1 is YES, higher limits are NOT available. And / or if the answer to two (2) or more of the remaining questions (2-10) is NO, higher limits are NOT available. 1) Has your organization suffered a breach of personal information in the last 12 months? 2) Do you conduct background checks on prospective employees? 3) Is there a posted document retention/destruction policy in place? 4) Do you maintain regularly updated computer security measures, e.g. firewall, secured wireless connectivity, virus protection? 5) Are your employee, customer, and other physical records maintained in a secure environment with limited access? 6) Is access to personal information restricted by job position? 7) Is there a Chief Information and/or Chief Security Officer (or equivalent)? 8) Do you have a comprehensive Information Security and Privacy Policy? 9) Do you provide regular security training/information to all people who have access to personally identifying information, whether in paper or electronic format? 10) Are all users issued unique IDs and passwords when connecting to or accessing the internal network? 3.

4 Referral Criteria: Any Insured that meets any one of the following criteria must be submitted to the Reinsurer for individual underwriting. Any policy with a COP premium over $3,500,000. Premium Determination: The below listed premiums are annual net premiums per Policy. The Company may, in its discretion, charge its insureds a premium of up to 20% in excess of the rates set forth below. Premiums may be pro-rated for short or odd term Policies. These premiums are not subject to further modification by the application of any other factors (e.g. company deviations, IRPM factors, or expense modifications). COP Policies Annual Aggregate Limit Response Expense and Defense & Liability Coverage (Sections 1 & 2) Premiums Forensic IT / Legal Review Sublimit Annual Premium per Policy $100,000 $10,000/$10,000 $2,500 $117 $250,000 $25,000/$25,000 $2,500 $289 $500,000 $50,000/$50,000 $5,000 $657 $1,000,000 $100,000/$100,000 $10,000 $928 The following forms have been approved by the HSB. Section II. Forms Form No./Edition Date State COPB COPB COPB COPB COPB COPB COPB COPB COPB COPB Countrywide Arkansas, Louisiana Illinois Missouri, Rhode Island New Hampshire, South Dakota, Vermont New York Oklahoma Texas Virginia Montana 4.

5 Section III. Excluded Classes of Business Class of Business Financial Institutions Adult Business Gambling or Gaming Credit Card or Financial Transaction Processing Hospitals Credit Reporting Agencies Collection Agencies Information/Data Brokers IT Outsourcing Companies Educational institutions (including private/public schools, Colleges & Universities) Municipalities Section IV. Document Updates This section summarizes updates made to an existing final Underwriting Guidelines document with the corresponding effective date of the update. Date of Update Description 5.

6 Farmland/Nationwide Agribusiness Insurance Company Special Ag Effective 6/1/16 Section I. General Rules and Premium Determination Data Compromise Coverage Eligibility: Insureds, except those in a class of business listed in Exhibit III Excluded Classes, are automatically eligible for a Data Compromise (DC) Coverage limit of up to $100,000 and Identity Recovery Coverage limit of $25,000. Insureds are eligible for increased DC Coverage limits of $250,000, $500,000 or $1,000,000 subject to acceptable answers to Increased Limits Questionnaire below. If a Policy that was in compliance with the eligibility rules at the time of its issuance subsequently becomes non-compliant, that Policy will be covered under the Reinsurance Agreement until its expiration. Increased Limits Questionnaire Applicable to all Insureds Eligibility Questions for $250,000 Limit: Insureds must answer no to question 1 and yes to at least 2 out of 4 of the remaining questions to be eligible. (1) Has your organization suffered a breach of personal information in the last 12 months? (2) Do you conduct background screens for prospective employees? (3) Is there a posted document retention/destruction policy in place? (4) Do you maintain regularly updated computer security measures, e.g. firewall, secured wireless connectivity, virus protection? (5) Are your employee, customer, and other physical records maintained in a secure environment with limited access? Eligibility Questions for $500,000 or $1,000,000 Limit: Insureds must answer no to question 1 and yes to at least 8 out of 9 of the remaining questions to be eligible. General: (1) Has your organization suffered a breach of personal information in the last 12 months? (2) Do you conduct background checks on prospective employees? (3) Is there a posted document retention/destruction policy in place? (4) Do you maintain regularly updated computer security measures, e.g. firewall, secured wireless connectivity, virus protection? (5) Are your employee, customer, and other physical records maintained in a secure environment with limited access? (6) Is access to personal information restricted by job position? (7) Is there a Chief Information and/or Chief Security Officer (or equivalent)? (8) Do you have a comprehensive Information Security and Privacy Policy? (9) Do you provide regular security training/information to all people who have access to personally identifying information, whether in paper or electronic format? (10) Are all users issued unique IDs and passwords when connecting to or accessing the internal network? 6.

7 Referral Criteria: Any Insured that meets any one of the following criteria must be submitted to the Reinsurer for individual underwriting. * Any new Special Ag General Liability policy with a total premium greater than $350,000. Premium Determination: The below listed premiums are annual gross premiums per Policy. For the chosen coverage(s), use the applicable premium, in accordance with the applicable Program. The premium for Identity Recovery Coverage is included in the premiums below. Insureds not purchasing Data Compromise, who wish to purchase Identity Recovery, may do so at a gross annual premium of $12 per policy. Premiums may be pro-rated for short or odd term Policies. These premiums are not subject to further modification by the application of any other factors (e.g. company deviations, IRPM factors, or expense modifications). Special Ag Policies Response Expense Coverage only (Section 1) Premiums Coverage Program DC Annual Aggregate Limit DC Forensic IT / Legal Review Sublimit DC IDR Limit/ Mercantile Service Contractors Motel Hotel Apartment Office Industrial & Processing Monoline Institutional $50,000 $5,000/$5,000 $2,500 $25,000/$0 $92 $85 $64 $92 $100,000 $10,000/$10,000 $2,500 $25,000/$0 $134 $180 $134 $180 $250,000 $25,000/$25,000 $2,500 $25,000/$0 $249 $349 $249 $349 $500,000 $50,000/$50,000 $5,000 $25,000/$0 $560 $560 $560 $560 $1,000,000 $100,000/$100,000 $10,000 $25,000/$0 $786 $786 $786 $786 Response Expense and Defense & Liability Coverage (Sections 1 & 2) Premiums Coverage Program DC Annual Aggregate Limit DC Forensic IT / Legal Review Sublimit DC IDR Limit/ Mercantile Service Contractors Motel Hotel Apartment Office Industrial & Processing Monoline Institutional $50,000 $5,000/$5,000 $2,500 $25,000/$0 $124 $113 $85 $124 $100,000 $10,000/$10,000 $2,500 $25,000/$0 $182 $247 $182 $247 $250,000 $25,000/$25,000 $2,500 $25,000/$0 $334 $484 $344 $484 $500,000 $50,000/$50,000 $5,000 $25,000/$0 $780 $780 $780 $780 $1,000,000 $100,000/$100,000 $10,000 $25,000/$0 $1,096 $1,096 $1,096 $1,096 7.

8 Section II. Forms The following forms have been approved by the HSB. Form No./Edition Date State CG CG CG CG CG CG CG CG CG CG CG CG CG CG CG Data Compromise Multi State Data Compromise Arkansas Data Compromise Illinois Data Compromise Maryland Data Compromise Missouri and Rhode Island Data Compromise Montana Data Compromise New Hampshire, South Dakota and Vermont Data Compromise New York Data Compromise Texas Data Compromise Virginia Data Compromise North Dakota Data Compromise South Carolina Identity Recovery Coverage Multi State IDR Missouri IDR New York Section III. Excluded Classes of Business In addition to the excluded classes listed below, insureds with any invalid or unknown occupancy codes or occupancy codes not listed in the Tier Assignment Table above are ineligible for DC Coverage. Financial Institutions Adult Businesses Gambling or Gaming Class of Business Credit Card or Financial Transaction Processing Hospitals Credit Reporting Agencies Collection Agents 8.

9 Section IV. Document Updates This section summarizes updates made to an existing final Underwriting Guidelines document with the corresponding effective date of the update. Date of Update Description 6/1/2016 Added the Special Ag DC and IDR program to the Farmland Nationwide Treaty and Underwriting Guidelines. 9.