It is my pleasure to present to you the first edition of the Compliance Assurance Corp. (CAC) e-newsletter. The purpose of this e-newsletter is to provide a vehicle for communication for the compliance community by providing news on the industry, within Compliance Assurance and with each other. I hope that you find this e-newsletter informative, at times entertaining, but most importantly, beneficial to your business.

The contents of the newsletter will include;

• The latest CAC product news, including updates, new releases and special events.
• An advice column will offer compliance advice to the insurance producer.
• Industry-impacting news will have a dedicated portion inside the newsletter. In addition to this e-newsletter, we will soon be offering an RSS feed of breaking news story that may affect your business strategy. When you sign-up for this news feed, you will receive news only pertaining to our industry, as it breaks. Look for this feature in the upcoming months.
• Our customer spotlight. We want to highlight the positives that take place within the compliance community, so if you have an accomplishment that you are proud, big or small, we want to share that with everyone. Your success may be the inspiration someone’s future success.

As this is a community newsletter, we encourage everyone to send us your comments, concerns and anything that you feel would benefit the group. We would be grateful for your feedback on this newsletter, on our products, on the industry in general.

Again, welcome to the community. It truly is a pleasure working with you, and I look forward to contributing to your success.

Jerry Shafran - CEO

We’ve got your back...
by Steve Polome, Chief Information Security Officer

The title of this article may make you grammatically wince, but let me assure you that it’s true: We do have your back. This column will appear regularly in Comply-Flash to discuss the security and compliance value that we bring to you and to update you on regulatory requirements as well as Comply On-Demand product enhancements.

The past several months have brought many changes to the industry and to Comply On-Demand. Increasingly, both consumers and regulators are paying more attention to the issue of Identity Theft and regulatory compliance. Our commitment to you is to provide the necessary tools to combat Identity Theft while helping you differentiate your business from your competitors. To that end, we have added and upgraded our tools:

• When you place the Compliance Assured Seal on your website, it will provide a click-through link to your custom privacy policy and Compliance Assured Certificate. See an example: Example Compliance Assured Seal
• Comply On-Demand now provides the required compliance language that when added to your outgoing email and fax, will protect you legally while also cautioning your clients on appropriate email usage.
• An updated Network Scanner searches for vulnerabilities on your network such as out-of-date Microsoft Patches, out-of-support Operating Systems, open ports, and unnecessary services. This automatic scanning tool does not give us or anyone else access to any customer data stored on your network workstations or server.
• Comply On-Demand adds Business Relationship Management and Processing to help you contact the companies and individuals with which you share customer information.

In today’s market, trusted privacy and security practices make good business sense. To stay compliant, you need experts working side by side with you as the rules change.

Remember – Your Security is our Business. If you ever have questions, call or email us anytime.

Steve Polome, CISSP-ISSMP, PMP is Chief Information Security Officer of Compliance Assurance Corporation. Prior to joining Compliance Assurance, Steve was a Vice President and Technology Director for PNC Bank.

• Computer equipment containing sensitive Neiman Marcus employee information was stolen earlier this month from a third-party pension benefits plan consultant.



• The University of Pittsburgh Medical Center has apologized for inadvertently posting patient medical records on one of its Web sites...



• Banks Report Fraud Spurred By TJX Breach



• Officials: ID thieves preyed on wrong guy



• Laptop theft exposes teachers to ID fraud risk

The news items above are links to other web sites. These web sites are not owned or controlled by Compliance Assurance Corporation.