{"id":12376,"date":"2025-02-18T08:01:57","date_gmt":"2025-02-18T16:01:57","guid":{"rendered":"https:\/\/www.aiasurety.com\/bail\/?page_id=12376"},"modified":"2026-01-26T15:40:13","modified_gmt":"2026-01-26T23:40:13","slug":"security-commitment","status":"publish","type":"page","link":"https:\/\/www.aiasurety.com\/bail\/privacy-policy\/security-commitment\/","title":{"rendered":"Security Commitment"},"content":{"rendered":"

Information Security Policy<\/strong><\/span><\/h1>\n

Last Revised 2\/18\/25
\n<\/strong><\/p>\n

Information Security Policy for Web and EULAs<\/strong><\/span><\/h2>\n

The following Information Security Policy is provided by AIA Holdings, Inc. and its affiliates, (collectively, \u201cwe\u201d, \u201cus\u201d, \u201cour\u201d).<\/p>\n

Cybersecurity Practices<\/strong><\/p>\n

As technology becomes more complex and sophisticated, so do the cyber risks that businesses and organizations face. We have implemented technologies and tools to implement cybersecurity protections and maintain a cyber risk management strategy related to information security that includes monitoring emerging security threats and assessing appropriate responsive measures.<\/p>\n

Policy & Governance<\/strong><\/p>\n

We and our affiliates maintain a comprehensive set of information security policies and standards, which are modeled to align with the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF). Our information security policies and standards have been developed in collaboration with groups across the enterprise, such as Legal, Compliance, HR and each of our business segments. Our policies include, for example, Information and System Use policies for employee and non-employee system users.<\/p>\n

We perform an annual information security assessment as part of our Information Security Management Program (ISMP).<\/p>\n

Technology<\/strong><\/p>\n

We use various technologies and tools, as appropriate, to enhance information security, such as multifactor authentication, encryption, firewalls, intrusion detection and prevention, vulnerability scanning, and patch management.<\/p>\n

In addition, our CISO (Chief Information Security Officer) team is actively engaged within the information security community in order to monitor emerging trends and developments and acquire intelligence for identifying and mitigating cyber threats.\u00a0 Additionally, our Cybersecurity team investigates suspicious events.<\/p>\n

As the workforce, the work environment and the threat landscape continue to evolve, we continue to evaluate related risks and implement appropriate controls.
\n
\nTraining & Awareness<\/strong><\/p>\n

To help manage risks from potential cybersecurity threats, as part of our annual cybersecurity training, all employees receive data protection and privacy training, which focuses on the need to appropriately protect and secure confidential company information. We also provide regular targeted training on topics such as phishing and secure application development, among others. In addition to online training, employees are provided with cybersecurity related information through a number of different methods, including event-triggered awareness campaigns, recognition programs, security presentations, intranet articles, videos, system-generated communications, email publications and various simulation exercises.<\/p>\n

Third-Party Relationships<\/strong><\/p>\n

As part of our supplier risk management program, using a risk-based approach, the information security team works with our vendor management team to conduct assessments with respect to our third-party service providers based upon the risk of each third-party.<\/p>\n

Where appropriate, we seek to incorporate contractual language with third party service providers that includes clear terms involving the collection, use, sharing and retention of user data, as well as compliance with appropriate security terms.<\/p>\n

Incident Response<\/strong><\/p>\n

We have a Security Incident Response Plan in place. The Incident Response team, under the direction of the CISO, executes on the IR plan with the goal of ensuring timely and accurate resolution of information security incidents.<\/p>\n

Additional Information <\/strong>Additional information regarding privacy and security, including our Privacy Statements, is available on\u00a0our website.<\/p>\n

Contact Information<\/strong><\/p>\n

If you have any questions, you may contact us via:<\/p>\n

Phone: (800) 500-3727
\nEmail: info@alleghenycasualty.com<\/p>\n

Postal Address:
\nAIA Holdings, Inc.
\nAttn: Compliance Department
\nPO Box 5600, Thousand Oaks, CA 91359<\/p>\n","protected":false},"excerpt":{"rendered":"

Information Security Policy Last Revised 2\/18\/25 Information Security Policy for Web and EULAs The following Information Security Policy is provided by AIA Holdings, Inc. and its affiliates, (collectively, \u201cwe\u201d, \u201cus\u201d, \u201cour\u201d). Cybersecurity Practices As technology becomes more complex and sophisticated, so do the cyber risks… <\/p>\n

Read more<\/a><\/div>\n","protected":false},"author":1,"featured_media":0,"parent":11263,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","meta":[],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\n