Development of Cyber Security Legal Measures for Insurance Company

Abstract

The objectives of this research article were 1) to study the background and rationale, concepts, and theories of cyber security related to insurance company; 2) to study organizations and laws related to cyber security of insurance company; and 3) to suggest guidelines to develop cyber security legal measures for insurance company. This was a qualitative research using document research. The results of the research found that 1) cybercrime has occurred with the development of computers and internet communications in countries all over the world, including Thailand. Cyber threats in the insurance business were caused by cybercriminals or fraudulent mistakes by insurance company personnel and insurance network groups. Concepts, principles, legal measures, principles of ethical measures and the concept of a strict security system based on zero trust which was an architectural system with strict login verification procedures can be used and integrated as a guideline for developing this matter. 2) cyber security laws for insurance company found that there were 7 related national laws and strategies, 6 insurance related organizations; and 3) the Office of the Insurance Commission (OIC) amended has announced this to be in line with insurance company supervision and issued new announcements to control insurance agents, insurance brokers strictly based on zero trust. Six insurance-related organizations set policies, plans, rules, regulations, management, training, and internal audits. Companies and individuals worked together strictly on the basis of zero trust.