Defining Reasonable Security in a World of Rapid Change

The NetDiligence Virtual Summer Summit panel “What is Reasonable Cybersecurity?” proves, defining “reasonable” is not an easy task.

Moderator Andy Maher (AXIS) led panelists Chris Cronin (HALOCK), Doug Meal (Orrick LLP), and Tim Murphy (Office of the Attorney General for Pennsylvania) in a spirited discussion which gave hints of how this issue could become combative in a high stakes legal setting. But as Cronin pointed out, the very fact that definitions are evolving in contentious settings belies the fact that litigators, regulators, and insurers do have common understanding of how risk is assessed. And so, the tasks of defining terms, weighing their utility, and applying them though a risk-based analysis process should fall on experts such as the assembled panel.