Cyber
What a 72-hour notification clause means on a Friday
Notification clocks run in real hours, not working ones, and most incidents are discovered when the office is closing.
Ayesha Karim
4 minute read
Both regulators and policies impose notification deadlines, and both count in calendar hours. An incident discovered at five on a Friday leaves the same seventy-two hours as one discovered on a Tuesday morning, minus a weekend in which almost nobody in the business can be reached.
The decision that has to be pre-made
The single most useful preparation is deciding, in advance and in writing, who is authorised to call the insurer’s incident line without seeking approval. Most delay is not technical. It is people waiting for a decision from someone who is on a plane.
Write the number down somewhere that does not depend on the network being up. A response plan stored only on the file server is not a response plan.
At a glance
Class: Cyber
Seventy-two hours from Friday afternoon ends on Monday afternoon, and you will spend two of those days finding someone with authority.
Not sure whether this applies to your cover? Send us the schedule and we will read it.
Request a review