The exempted system is the one attackers find and the one that voids the policy. The exemption register is now a financial document.
A government buying physical parts it does not want, because a criminal group encrypted a third company’s systems.
An intrusion at one company produced a sovereign commitment in four weeks. Banks too large to fail got capital requirements in exchange; there is no equivalent here.
A state capital did not have the capacity to respond without help. For a city, the failure to invest was not a choice against an alternative.
Underwriting a life policy means knowing who someone is and what is wrong with them.
A rule that only ever withholds is not a rule about evidence; it is a policy of silence. Here the threshold was met.
The distribution channel an organisation trusts most is the one that reaches everything.
MFA existed, on the firewall. The application said privileged access. The policy was unwound from the first day, a month after the ransomware.
The war clause failed in court, so the market wrote a new one with attribution built in. Nobody has yet said who decides.
A seller of cyber insurance, encrypted, and a reported $40 million payment the company has never confirmed. Its own policy did not cover it.
A three-year-old patch, a quote form that kept everything, and 1.27 million people, most of whom had never bought a policy.
When we grant anonymity, what we promise, and what we never withhold.