MD | The Maryland Insurance Department has issued Bulletin 23-18 reminding all carriers of the requirements, as of October 1, 2023, to have in place a comprehensive written information security program based on the carrier’s risk assessment (“information security plan”) and a written incident
response plan (“response plan”) designed to promptly respond to, and recover from, a cybersecurity event.
