Indiana § 27-2-27-20 - Incident response plan
Full text of Indiana Indiana Code § 27-2-27-20 — Incident response plan, with citation guidance and answers to common questions.
§ 27-2-27-20. Incident response plan
Sec. 20. (a) As part of its information security program, a licensee shall establish a written incident response plan designed to promptly respond to, and recover from, any cybersecurity event.
(b) An incident response plan must include the following:
(1) The internal process for responding to a cybersecurity event.
(2) The goals of the incident response plan.
(3) The definition of clear roles, responsibilities, and levels of decision making authority.
(4) External and internal communications and information sharing.
(5) Identification of requirements for the remediation of any identified weaknesses in information systems and associated controls.
(6) Documentation and reporting regarding cybersecurity events and related incident response activities.
(7) The evaluation and revision, as necessary, of the incident response plan.
(c) Annually, not later than April 15, each insurer domiciled in Indiana shall submit to the commissioner a written statement certifying that the insurer is in compliance with the requirements set forth in sections 16 through 19 of this chapter and this section. Each insurer shall maintain for examination by the department all records, schedules, and data supporting this certificate for a period of five (5) years. To the extent an insurer has identified areas, systems, or processes that require material improvement, updating, or redesign, the insurer shall document the identification of the areas, systems, or processes and the remedial efforts planned and underway to address the areas, systems, or processes. The documentation must be available for inspection by the commissioner.
As added by P.L.130-2020, SEC.10.
Frequently Asked Questions About Indiana § 27-2-27-20
What does Indiana Code § 27-2-27-20 cover?
Section 27-2-27-20 ("Incident response plan") is part of the Indiana Code, the codified statutory law of Indiana. It sets out the legal rule or procedure described in the text above. Statutes are amended regularly, so always verify against the official source.
How do I cite Indiana § 27-2-27-20?
A common citation format is "Indiana Code § 27-2-27-20" (Indiana). Legal writing may require the code abbreviation, section number, and year or edition. Match the style required by your court, professor, or publisher.
Is this the official text of Indiana law?
No. This page is for research and education and may not include the most recent amendments. For official current law, check the Indiana official source linked on this page or consult a licensed Indiana attorney.
How does Indiana § 27-2-27-20 apply to my situation?
Statutes are interpreted in context, and application depends on your specific facts. Only a licensed attorney in Indiana can advise on how this section applies to you. Contact your state or local bar association for a referral.
Sources & Verification
Not legal advice. Verify against the official source and consult a licensed attorney in Indiana.