Insurance
Security for carriers, agencies, and administrators.
Insurers hold some of the most sensitive data there is: health, financial, and personal records on every policyholder. We build security programs that satisfy NY-DFS Part 500, state insurance data security laws, and the carriers’ own due diligence.
At a glance
- Frameworks
- NY-DFS 500, NAIC Model Law, HIPAA, SOC 2
- Specialty
- Encryption and key management
- Clients include
- Premera Blue Cross, Delta Dental
- Testing
- Annual penetration testing
Regulatory context
What NY-DFS and the NAIC Model Law expect.
The NAIC Insurance Data Security Model Law, adopted across a growing number of states, and NY-DFS Part 500 both expect a written program, a risk assessment, tested controls, and board-level oversight. Health insurers add HIPAA on top.
Sidechain has worked with insurers and health plans for years. Most of that work is encryption for claims and policy systems, and the documentation regulators ask for.
- Programs mapped to NY-DFS Part 500 and the NAIC Model Law
- Encryption and key management for claims and policy systems
- Third-party administrator and agency security due diligence
- Incident response planning with regulatory notification timelines
- NY-DFS Part 500
- Applies to insurers, agencies, and brokers licensed in New York.
- NAIC Model Law
- State insurance data security laws modeled on the NAIC framework.
- HIPAA
- For health insurers and plans.
- SOC 2
- Carrier and partner due diligence.
Services
What we do for insurance organizations.
Managed security
Documented, monitored, and reported monthly.
Learn moreEncryption & key management
Claims, policy, and payment data protected with keys you control.
Learn morePenetration testing
Portals, agent systems, APIs, and networks.
Learn moreAssessments & compliance
Risk assessments and gap analysis against NY-DFS and NAIC requirements.
Learn moreHIPAA security
For health insurers and plans handling ePHI.
Learn moreBackup & recovery
Tested restoration for systems policyholders depend on.
Learn moreAfter two years of trying to manage our encryption platform alone, Sidechain operates it smoother than I ever thought possible.
Thank you for your superb expertise and service. Your work enables our business to continue to be secure and compliant.
Talk with an engineer who knows your industry.
Tell us about your environment, your obligations, and your deadline. We respond within one business day.
(503) 389-3174 · info@sidechainsecurity.com · Portland, Oregon