Information Security Program Certification, Insurance Article §33–103 (j)(1)

BULLETIN NO. 24-6 DATE: February 14, 2024 TO: All insurers, nonprofit health service plans, health maintenance organizations, dental organizations, managed general agents, and third party administrators RE: Information Security Program Certification, Insurance Article §33–103 (j)(1) Carriers1 that are required to file an Information Security Program Certification2 with the Insurance Commissioner must do so on or before April 15 of each year. The first certification is required on or before April 15, 2024. Bulletin 23-18 provided information regarding the requirements to have in place a comprehensive written information security program based on the carrier’s risk assessment and a written incident response plan designed to promptly respond to, and recover from, a cybersecurity event. Bulletin 23-18 reviewed the criteria for an exemption from the requirement to file a certification. The purpose of this Bulletin is to provide the method for carriers to file the required Information Security Program Certification online. The Information Security Program Certification can now be submitted via electronic form at: https://marylandinsurance.jotform.com/240356360389965. This is the primary method of submitting the filing. Any questions regarding the form can be sent to Raymond Guzman, Chief of Market Analysis, Market Regulation and Professional Licensing at raymond.guzman@maryland.gov. 1 See §33–101 (c)(1) 2 See §33–103 (j)(1) KATHLEEN A. BIRRANE Commissioner TAMMY R. J. LONGAN Acting Deputy Commissioner MARY M. KWEI Associate Commissioner Market Regulation & Professional Licensing WES MOORE Governor ARUNA MILLER Lt. Governor 200 St. Paul Place, Suite 2700, Baltimore, Maryland 21202 Direct Dial: 410-468-2113 Fax: 410-468-2020 Email: Mary.Kwei@maryland.gov 1-800-492-6116 TTY: 1-800-735-2258 www.insurance.maryland.gov Questions or comments on the requirement to file may be sent to Mary Kwei, Associate Commissioner, Market Regulation and Professional Licensing, Maryland Insurance Administration, 200 Saint Paul Place, Suite 2700, Baltimore, MD 21202, or call 410-468-2113, or email to mary.kwei@maryland.gov. KATHLEEN A. BIRRANE Commissioner By: Signature on Original Mary M. Kwei Associate Commissioner Market Regulation & Professional Licensing