P.O. Box 204
Gladwyne, PA 19035
610.896.9715
AGENDA
Day 1: Tuesday, May 19
Plenary: Cyber Claims & Losses Update
Get a sneak peek into the 2026 NetDiligence Cyber Claims Study and updates on recently published spotlight reports, offering a data-driven look at claims trends and loss patterns. The conversation will broaden as our practitioners share real-world insights from the trenches, highlighting what the numbers reveal about today’s cyber risk landscape.
- Jennifer Coughlin (M), Mullen Coughlin LLC
- Michael Bruemmer, Experian
- Mark Greisiger, NetDiligence
- Rica Herrera, Baker Tilly
- Christina Van Wert, Tokio Marine HCC-CPLG
Plenary: State of the Cyber Market: AI and Cyber Insurance: Emerging Coverage Challenges
As AI incidents increase, insurers face new underwriting, policy wording, and claims challenges. This session explores AI-specific coverage issues—definitions of AI failure, performance triggers, exclusions, carve-backs, and vendor aggregation—along with underwriting signals like governance, validation, monitoring, and vendor transparency. Panelists will also discuss preparing claims teams for AI-related investigations.
- Judy Selby (M), Tittmann Weix
- Brian Alva, Travelers
- Meredith Ponce, Lockton
- Scott Swift, Swiss Re
Plenary: Wrongful Use: Mishandling, Tracking and Exposure of Personal Data
Privacy exposures increasingly arise not from cyber hacks but from improper handling and use of personal data, creating complex challenges for organizations and insurers alike. Panelists will explore compliance best practices, privacy frameworks, and the nuances of coverage and exclusions. Join this discussion to gain critical insights to navigate this complex and expanding risk landscape.
- Hannah Hoeflinger (M), Marsh McLennan Agency
- Daniel Law, HSB
- Rebecca Pearson, WTW
- Brett Taylor, Cozen O'Connor
- Marcin Weryk, Coalition
Plenary: Threat Intelligence Updates from the NetDiligence Ransomware Advisory Board
This session features the NetDiligence Ransomware Advisory Board as they share the latest threat-intelligence insights and emerging trends in the threat landscape. Final discussion topics will be selected by the panel to highlight the most current and impactful developments. Stay tuned!
- Sean Hoar (M), Constangy
- Mari DeGrazia, IDX
- William Gadzinski, Pondurance
- Vince Harrelson, MOXFIVE
- Karla Reffold, Surefire Cyber
Day 2: Wednesday, May 20
Breakout A: AI Under Control: Frameworks for Risk and Governance
AI adoption is moving faster than most risk and governance programs. This program covers practical frameworks for assessing and controlling AI, including model and data integrity, validation, sanitization, and trust management. Panelists will also address evolving regulatory and cybersecurity expectations and where AI disruption is creating the greatest exposure.
- Aniket Bhardwaj (M), Charles River Associates
- Dante Stella, Dykema
- Fernando Tucci, TrendAI
Breakout B: Data Breach Litigation—Key Procedural Developments
This session will provide an update on key developments in data breach class action litigation, focusing on emerging defense strategies, procedural trends, and how courts are evaluating these claims. Panelists will also discuss evolving approaches to damages and settlement, offering practical insight into how breach-related cases are being litigated and resolved and what these dynamics mean for organizations, insurers, and counsel.
- Tawana Johnson (M), Lewis Brisbois
- Doug Meal, Boston College Law School
- Ronald Raether, Troutman Pepper Locke
- Melanie Witte, Crum & Forster
Breakout A: Beyond AI: The Next Wave of Hard-to-Insure Cyber Risk
While AI dominates headlines, a new set of emerging technologies may pose even greater challenges for cyber insurers. From quantum computing and cloud concentration to APIs, IAM systems, and software supply chains, these interconnected technologies create complex, systemic risks that are difficult to model, underwrite, and insure. This session will explore the next wave of cyber exposure and the structural traits that make these risks particularly challenging for the insurance market.
- David Chavez (M), Intact Insurance
- Tony Anscombe, ESET
- Lisa Phillips, Marsh
- Zachary Reichert, LevelBlue
Breakout B: Everything Old is New Again: How VPN Risk Translates Into Cyber Insurance Claims
VPN vulnerabilities continue to be a leading entry point in cyber incidents and insurance claims. This session will examine claims data highlighting the role of VPN compromise in cyber events, common vulnerabilities that attackers exploit, and how threat actors—including groups like Akira—leverage these weaknesses. Panelists will also walk through a typical VPN breach scenario and discuss the characteristics that make organizations attractive targets. Together, these insights will help insurers, practitioners, and organizations better understand how legacy access technologies continue to drive modern cyber losses.
- John Menefee (M), Travelers
- Allen Blount, Brown & Brown
- Kash Brown, Arete
- Kelly Lee, Ascot Group
- David Reed, Sompo
Breakout A: Beyond the Declarations Page: How Policy Definitions Shape Cyber Coverage
The declarations page may outline limits and retentions, but the real scope of cyber coverage often lies in the definitions. Terms like “security failure,” “system outage,” and “dependent systems” can determine whether a claim is covered, limited, or denied. This panel will examine how key definitions influence claim outcomes and what brokers, insurers, and policyholders should understand about these provisions before an incident occurs.
- Florence Levy (M), CRC Group
- Meredith Brown, QBE
- Aaron Hawke, BDO
- Keeley Sidow, Gallagher
- Christina Terplan, Atheria Law
Breakout B: Litigation Focus: California Invasion of Privacy Act (CIPA)
Originally enacted in 1967 as a wiretap statute, the California Invasion of Privacy Act (CIPA) is increasingly being used to challenge modern website technologies such as tracking pixels, session replay tools, and chat widgets. This session will examine the growing wave of litigation, evolving jurisdictional interpretations, stalled legislative reform efforts, and the implications for businesses and cyber insurers.
- James Monagle (M), Mullen Coughlin LLC
- Rachel Lowe, Alston & Bird
- Julia Verdi, At-Bay, Inc.
- Jim Vint, Secretariat
Breakout A: Sector Risk: Hospitality: Hotels, Resorts and Casinos
The hospitality sector faces a unique cyber risk profile driven by high-volume transactions, distributed and franchise-heavy operations, complex third-party ecosystems, and an extremely low tolerance for downtime. This session will explore the most significant cyber threats facing hotels, resorts, and casinos, and how organizations are managing operational disruption, payment risks, and reputational harm in an increasingly complex digital environment.
- Karrieann Couture (M), Aon
- Amanda Graham Brazinski, Beazley
- Casie Collignon, BakerHostetler
- Meghan Finigan, MDD Forensic Accountants
- Max Henderson, Kroll
Breakout B: Finally! Concrete Guidance from the Courts on Cyber Coverage
Recent court decisions are offering greater clarity on how cyber insurance policies apply to today’s cyber events. This session will highlight key rulings addressing system failure and business interruption coverage, the treatment of biometric privacy claims, insured response actions that increase losses, and limits on downstream liability. Panelists will also discuss the growing role of exclusions and policy compliance in claim denials and what these trends mean for insurers and policyholders.
- Jamison Narbaitz (M), Atheria Law
- Liam Cattermole-Ward, Munich Re
- Scott Godes, Barnes & Thornburg LLP
- Margaret Reetz, Mendes & Mount, LLP
- David Schoeggl, JAMS
Breakout A: Sector Risk: Inside Data Center Risk: Where Cyber, Property, and OT Converge
Data centers sit at the intersection of cyber risk, operational technology, and physical infrastructure, creating a complex risk profile for insurers and operators alike. As identity-based access becomes the dominant attack vector and facilities grow increasingly dependent on power and other critical infrastructure, disruptions can cascade across digital and physical systems. This session will examine how these interdependencies shape emerging threats, operational resilience, and insurance exposure.
- Dan Burke (M), Gallagher
- Kara Higginbotham, Zurich North America
- Eva Kwan, Parametrix
- Eric Smith, Check Point Software Technologies
Breakout B: Cyber CAT Readiness and Response: Can AI Help Close the Vendor Capacity Gap?
As the cyber industry prepares for a potential cyber CAT event, questions remain about whether traditional security and incident response vendors can scale to meet surge demand. At the same time, a new wave of vendors is entering the market with AI-driven tools designed to automate triage, investigation, and response. This panel will examine whether these emerging solutions can meaningfully expand vendor capacity and how they may reshape the incident response ecosystem.
- Daniel Haier (M), Cipriani & Werner PC
- Oscar Martinez, Velos
- Anna Sarnek, Terra Security
- Hannah Woodruff, Relativity
Breakout A: Closing the Gap between Compliance and Care in Incident Response
This panel explores the key decisions organizations face after a data breach, from discovery through notification and harm mitigation. Panelists will examine how incidents are assessed, impacted populations identified, and timing considerations that influence consumer risk. The discussion will also highlight the role of cyber insurance claims managers in guiding response efforts, including interpreting policy language and advising on mitigation services. Experts will address when protections like credit monitoring or identity services are warranted, required, or covered, offering practical insight into balancing legal obligations and consumer trust.
- Kelly Garrison (M), Pierson Ferdinand LLP
- Ryan Caruso, CyEx
- Alex Clark, Hylant
- Christlynn Dornevil, Cowbell
Breakout B: Restoring from Backups: Speed, Evidence, and Coverage After a Cyber Event
Backups are often viewed as the fastest path to recovery after a cyber incident—but restoring too quickly can introduce legal, forensic, and insurance complications. This session examines the critical decisions organizations face when determining if, when, and how to restore from backups during incident response. Attendees will gain practical insight into coordinating insurers, forensic teams, legal counsel, and IT responders to ensure backup-based recovery preserves evidence, supports coverage determinations, and prevents reinfection.
- Melissa Ventrone (M), Clark Hill PLC
- Dave Cunningham, Alvaka
- Steve Gemperle, Magnet Forensics
- Diana Hudson, CFC
Plenary: State of the Cyber Market: View from the Trenches
Macro issues like sustainability and profitability loom over cyber insurance conferences, where speakers often trade in platitudes and talking points. But real sustainability and profitability begin—and end—with day-to-day underwriting.
This session will be a lively exchange on the “granular”: risk selection; coverage creep (reinstatements, drop-down sublimits, guaranteed renewals); pricing adequacy; and good old-fashioned underwriting discipline. After nearly three years of a soft market, amid escalating threat levels and a steadily rising attritional loss baseline, the questions remain: what coverage is too broad, and what price is too cheap?
- Robert Parisi (M), Munich Re
- Grant Dethlefsen, Aon
- Meghan Hannes, K2 Cyber
- Brian Robb, Berkshire Hathaway Specialty Insurance