AIANC's STREET WISE - February 2014

More Information about AIANC Membership at www.AllianceInsuranceAgentsNC.com

STREET WISE Alliance of Insurance Agents of NC

Has your agency ever been the victim of a data breach?

A data breach is an incident that involves the unauthorized or illegal viewing, access or retrieval of data by an individual, application or service. It is a type of security breach specifically designed to steal and/or publish data to an unsecured or illegal location.

Table of Contents HAS YOUR AGENCY EVER BEEN THE VICTIM OF A DATA BREACH? ............ 1 DO YOU SELL BOPS AND GLS?...... 2 WHAT DOES CYBER LIABILITY INSURANCE COVER? ...................... 7 HOW MUCH DOES YOUR STATE FINE FOR TEXTING AND DRIVING? ........ 11 It could be anywhere from $20 to $10,000 for a first-time offender—or no ban at all. .. 11

Does your agency …

•Obtain social security numbers, personal health information, driver’s license numbers, bank account numbers of insureds?

•Have access to confidential client records (financial statements, competitive information)?

•Use an agency management system?

•Store paper files or are considering going paperless?

•Provide online access for payment?

•Have a website?

•Rely on a computer network on a daily basis?

•Allow employees to use personal mobile devices for agency transaction?

If yes to any of the above, your agency carries a significant exposure to cyber risk.

Has your agency ever been the victim of a data breach?

AIANC’s STREET WISE

Page 1

The term “security breach” means a compromise of the security, confidentiality, or integrity of, or the loss of, computerized data that results in, or there is a reasonable basis to conclude has resulted in – “ (A) the unauthorized acquisition of sensitive personally identifiable information; or “ (B) access to sensitive personally identifiable information that is for an unauthorized purpose, or in excess of authorization.

SENSITIVE PERSONALLY IDENTIFIABLE INFORMATION. — The term “sensitive personally identifiable information” means any information or compilation of information, in electronic or digital form that includes— “ (1) an individual’s first and last name or first initial and last name in combination with any two of the following data elements: “ (A) home address or telephone number; Continued on page 2

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

Data Breach Continued from page 1 “(B) Mother’s maiden name; “ (C) month, day, and year of birth; “ (2) a non-truncated social security number, driver’s license number, passport number, or alien registration number or other government-issued unique identification number; “ (3) unique biometric data such as a finger print, voice print, a retina or iris image, or any other unique physical representation; “ (4) a unique account identifier, including a financial account number or credit or debit card number, electronic identification number, user name, or routing code; or “ (5) any combination of the following data elements: “ (A) an individual’s first and last name or first initial and last name; “ (B) a unique account identifier, including a financial account number or credit or debit card number, electronic identification number, user name, or routing code; or

AIANC Members may download this booklet at www.AllianceInsuranceAgentsNC.com

“ (C) any security code, access code, or password, or source code that could be used to generate such codes or passwords

Do you sell BOPs and GLs?

So, have you ever thrown away a completed application and printed a new one with corrections? It should have been shredded.

If yes, can you answer the Top 5 Questions Clients Ask about Cyber Liability?

Have you ever had an employee leave and start soliciting policyholders? It is common for employees to deliberately take confidential information with them when they leave for a new job. That activity is considered a data breach.

If no, can you say “Would you like fries with that order?”

If no, do you have an E&O policy with maximum limits?

1. “Doesn’t my general liability policy cover me?”

They mistakenly feel they have an ownership in it.

They helped create the data, and therefore they feel like it’s theirs.

In a word, no. The ISO property form protects the physical presence of computers but not the data that is stored on them. The ISO general liability form specifically excludes claims of copyright, trademark and trade secret infringement. The personal injury provisions of a GL form generally rely on “publication”-- an undefined term. Although there have been limited instances of coverage for privacy breach under GL forms, relying on this for coverage is not in your client’s best interest.

Did you notify all the policyholders of the data breach and offer credit monitoring?

Do you always change the passwords to your companies’ websites as soon as an employee leaves your employment?

Have you read the “intangible” exclusions in your agency’s BOP, fidelity bond or crime insurance policy?

The above scenarios are usually not covered.

Business Interruption coverage, an essential part of any businesses risk management plan, will not respond to outages caused by computer viruses or hackers. In addition, 47 U.S. states now have laws requiring notification in the event of a potential loss of PII (personally identifiable information), as well as fines and penalties for not reporting the breach.

Continued on page 4

AIANC’s STREET WISE

Page 2

February, 2014

Vacant Building coverage

in a five-minute phone call.

Call. Quote. Bind. Using TAPCO’s courteous and prompt call center, Vacant Building coverage can be quoted, bound and delivered to your e-mail inbox quickly and accurately during one five-minute phone call.

CGL Coverage Available: • Primary limits up to $3 million Occurrence/Aggregate • $5,000 Medical Payments Coverage • Additional Interests • Coverage limited to designated premises • Excess or Umbrella limits up to $5 million

Property Coverage Available: • Building • Contents • Basic, Broad or Special Form • Replacement Cost or Actual Cash Value * Available coverages and markets may vary dependent upon risk characteristics.

The TAPCO Service Pledge • “A”-rated non-admitted carrier • Competitive pricing • Fast policy turnaround • In-house financing available

• $10 credit to your personalized TAPCO EZ Bucks Visa debit card with each policy • Visa, MasterCard and ACH payments accepted

• Quick claims handling

1,000 Strong

More than 1,000 classes of P&C business written under binding authority.

800-334-5579 www.gotapco.com

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

Statutory Concerns

Data Breach

The federal Gramm-Leach-Bliley Act requires independent agencies and brokers to proactively implement administrative, technical, and physical safeguards to protect customer non-public personal information.

Continued from page 2 Many carriers offer policies that can cover regulatory fines or penalties your client might incur because of a data breach. Whether or not slim chances exist for liability coverage in other policies, one thing is for sure: none provide reimbursement for the costly first-party expenses required to comply with regulatory requirements and out-of-pocket legal expenses incurred to navigate the process.

Check out your state’s Data Breach Code www.perkinscoie.com/statebreachchart Some cyber policies will pay for costs associated with data breaches caused by employees, including the cost of notifying affected individuals if personal information is exposed; forensics costs; legal costs; notification costs; credit monitoring; and public relations costs associated with an employee theft of personal client information.

2. “How much is this coverage going to cost?”

Cyber liability insurance is still a fairly new concept, so there's a lot of variation among policies, and a lot of room for premium negotiation. Agents should be certain that their clients understand that if they don’t purchase this coverage, they will be liable for first-party expenses including hiring forensic IT experts, notification of customers, providing annual credit monitoring, lawyer expenses and any applicable state or federal fines or penalties.

3. “We have an IT department and we have firewalls. Isn’t that enough?”

Not usually. Many data breaches occur because of an employee error or an “inside job” from rogue employees. From passwords tacked on computer screens in plain sight and employees opening suspicious email and downloading malware to lost laptops and smart phones, a large portion of security breaches occur because of your employee actions. Also, keep in mind that a data breach can occur from paper records as well.

Outdated customer information, old credit card receipts and employee files that have been thrown into the Dumpster are just as vulnerable as if a hacker logged into your network.

Video: Cyber Liability Explained http://youtu.be/gj_y9x3_7Jw What do these scenarios have in common?

4. “We use a third party for reservations and credit cards. Do we still need this coverage?”

Employee opens e-mail with virus that crashes network and spreads virus to customers

Are your clients taking online reservations? Are they processing credit card payments online? Chances are they’re already utilizing a third-party or cloud vendor and your client’s network is not storing the data. However, their customers’ personal information, in case of a data breach, is still the responsibility of your client.

Policyholder’s website is hacked and all data is corrupted Disgruntled ex-employee logs into and blocks your client’s network None of the losses are covered under typical business insurance policies

5. “What are our state’s privacy notification laws, fines and penalties?”

ISO Building and Personal Property Coverage Form has a $2500 annual limit for very limited named perils including viruses and harmful codes, as long as it wasn’t done by an employee or someone you hired to work on your computer

Wherever your client is located, make sure that you know the regulatory requirements of the state. When it comes to the unauthorized release of personally identifiable information (PII), there is no federal mandate governing privacy notification, so each state has its own law.

Commercial General Liability Policies specifically excludes damage to data and damage caused by loss of data Continued on page 6

AIANC’s STREET WISE

Page 4

February, 2014

Security, Accuracy & Reliability Focus on what you do best!

Selling insurance.

Let us focus on what we do best!

Ensuring your financial peace of mind.

Give Rosemary A Lambert, CPA, PA a call.

Whether you need daily financial guidance, or yearly tax planning services, our professional staff will work with you to customize a plan that aligns with the goals of your agency.

Our firm understands the need for absolute confidentiality. We will ensure the security of your financial systems and provide you with accurate and reliable data.

With more than 20 years in the business, Rosemary A Lambert has extensive experience in accounting for the insurance industry.

704704-855855-1509 WWW.ROSEMARYALAMBERTCPA.COM Closeout Services Include: ∗ ∗ ∗ ∗ ∗ ∗

Daily database management reports Company draft verifications File uploads Finance company integration Reconcile bank account(s) weekly Premium difference reconciliation

Other Financial Services Include: Full-service payroll functions ∗ Bill pay services ∗ Financial statement compilation ∗ Corporate, partnership & personal tax returns ∗ Business consultation ∗

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

Data Breach

Take this Risk Controls Quiz

Continued from page 4

1. Do you have a firewall?

Personal Injury: some PI claims created by a website or other forms of electronic communication

Yes

No

Don’t Know

2. Do you have a virus protection program in place?

2 huge Exclusions: j. Insureds in Media and Internet Type Business

Yes

k. Electronic Chatrooms or Bulletin Boards

No

Don’t Know

3. Do you have a person responsible for information security?

Transmission of a Virus is not covered because of the Electronic Data exclusion language

Yes

Where is Digital Info Stored?

No

Don’t Know

4. Do you outsource a critical part of your internal network/computer system or internet access/presence to others? If yes, please explain:

Computers Cameras Fax / Copier / Printer

Yes

iPod, GPS, PDA

No

Don’t Know

5. Do you have a written privacy or security policy?

Cell phones Yes

How do Breaches Occur?

No

Don’t Know

6. Do you control access to your computer systems?

Accidents or Mistakes Hackers

Yes

Equipment Theft

No

Don’t Know

7. Does your hiring process include criminal background checks?

Employees

Yes 3 Biggest Agency Security Threats

No

Don’t Know

8. Have you ever experienced a privacy breach or security breach?

•An employee theft or inadvertent mistake that exposes customers’ personal information to unauthorized parties. (An example of an inadvertent mistake would be opening an email attachment containing a virus from an unknown source.)

Yes

No

Don’t Know

9. Do you have a program in place to test your security/privacy controls?

Yes

No

Don’t Know

10. Do you have a program in place to test security/privacy controls of your vendors?

•Physical loss or theft of a computer, portable device, back up tape or other removable media—all containing customers’ non-public personal information. As these devices have become more portable, and they are regularly taken outside the agency premises, this security risk has multiplied significantly. Also, the substantial risk of a break-in to the agency’s offices and the theft of its computers are often overlooked when an agency develops its security policy.

Yes

No

Don’t Know

11. Do you allow employees to download Personally Identifiable Information of customers or confidential information in your care belonging to third parties onto laptops or other storage media?

Yes

No

Don’t Know

If yes, is the information encrypted?

•Loss or theft of a password permitting unauthorized individuals to gain access to customers’ personal information.

Yes

No

Don’t Know

Continued on page 8 AIANC’s STREET WISE

Page 6

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

4 Situations Where Cyber Insurance Can Save Your Agency

Data Breach Continued from page 6 How to avoid losses Do a review with your clients of their business cyber risks

1.

Cyber Insurance Protects Site Content

2.

Cyber Insurance Guards Against Data Breaches

3. Cyber Liability Insurance Covers Employee Gaffes

Discuss “cyber-risk” coverage for loss of or damage to data

4.

Cyber Insurance Works Offline As Well

What Does Cyber Liability Insurance Cover?

Have a data security risk assessment performed by an IT professional who specializes in data security

Like any type of insurance policy, the actual options and details of the policy vary according to the insurer.

Additionally, what a business will need as far as coverage will vary—some companies may just use computers to store finance and billing information or may use a computer for anything and everything.

Steps you can take to protect your data Change your password on every website once every few months Do not use the same password for multiple sites or accounts

Despite the differences in insurance policies by different insurers and the different needs of businesses, cyber liability insurance typically provides coverage for six main areas:

Create a strong password that includes letters, numbers, and other characters Watch out for phishing e-mails and spam emails requesting personal or sensitive information

Business Interruption—If a business is the victim of a cybercrime, such as a hack or a virus, this would cover any loss of revenue experienced as a result, whether a temporary shut-down is needed or even a long term interruption of operations.

Check out www.LastPass.com

Continued on page 8 AIANC’s STREET WISE

Page 7

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

What Does Cyber Liability Insurance Cover?

online content and provide protection from copyright claims, slander, invasion of privacy, and other IT claims.

Continued from page 7

PR and Crisis Management—If your company has just experienced a security breach and has had to send out notifications to customers and clients, on top of being out of operation to clean up the mess, there’s no doubt the company image has been tarnished and stands to lose future business to at least some degree. When Sony was hacked, there were undoubtedly many customers who were too scared to place their billing info and private information into the PlayStation Network that was compromised, so Sony had to do some quick and fantastic PR work. This coverage would help pay for subsequent public relations and marketing efforts needed to prevent extreme damage to your company’s brand.

Notification Expenses—Most states have notification requirements, which dictate how and when a business must notify any parties whose private information was possibly compromised in a breach or if it was obtained by someone without authorization or permission.

In some cases, a business must provide ongoing credit monitoring or identity theft insurance or monitoring to those whose information was compromised. When Sony was hacked, for example, the company had to provide $1 million dollar identity theft insurance policies to all customers in the database that was hacked.

Notification expenses and any required monitoring or protection for customers can quickly add up and be a huge addition to already costly expenses of a cybercrime.

Data Loss and System Damage—If you’ve assumed your current commercial liability policy provides coverage to computers under personal property coverage, you’d be sorely surprised to find it only covers the actual computer itself—not what’s in its memory. Any data on the computer isn’t protected under any other type of insurance, and for most businesses, this can be devastating. Protection for what’s really just a hunk of plastic or other synthetic materials won’t do you much good if everything inside is stolen or damaged.

Content Liability—You may want to think of any content you put online like personal property you insure at your place of business. You buy insurance to protect personal property if it’s stolen or damaged, and the content you place on your website, blog, or any other kind of web presence is your property as well. Content liability would help pay for anything that’s related to your

Continued on page 9 AIANC’s STREET WISE

Page 8

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

What Does Cyber Liability Insurance Cover?

Continued from page 8 Regulatory Investigation Expense—With the evolution of technology continuing to grow, there will undoubtedly be more regulations and laws surrounding any offline or online data and property. It’s only been recently that new notification laws were enacted and privacy laws are constantly being changed, so there will probably be a whole new set of audits created to ensure compliance. Just like personal lines of insurance which can exclude coverage for anything related to acts of war or government regulations, so do commercial policies.

However, cyber liability insurance can provide coverage for regulatory investigation expenses.

Cyber liability insurance can also provide coverage for situations such as: Internet liability—protection from damages that arise if an internet service provider (ISP) is hacked or is suddenly out of operation. This could also include damages resulting from a website host or server shutting down, experiencing a loss in data or a loss from a security breach, or lapses in operation.

Intangible assets—protection for any damages to code or data. For example, if a business’s website was hacked resulting in code and content being stolen, this coverage could help pay for the costs of replacing them.

Web content liability—would help pay for damages and defense costs resulting from libel or copyright claims, trademark infringement, defamation claims, or damages done to a website by a hacker or someone else.

ISO's E-Commerce Program helps you offer a variety of coverage options for commercial companies and financial institutions that do business online. The program will benefit organizations that: use e-mail rely on the Internet to promote products and services operate a website provide online transactional services, such as banking or trading store confidential customer information — whether credit card, financial, or medical EC 00 10 11 09, the Information Security Protection Policy (for commercial entities) and the Financial Institutions Information Security Protection Policy offer eight separate insuring agreements, giving you the ability to tailor coverage to fit the specific insurance needs of your customers. The insuring agreements include: Website publishing liability — liability arising from an infringement of another's copyright, trademark, trade AIANC’s STREET WISE Page 9

dress, or service mark; defamation against a person or organization; or violation of a person's right to privacy The first insuring agreement declares that the insurer will pay for loss that the insured becomes legally obligated to pay (and defense expenses) for a web site publishing liability. The scope of this coverage includes any actual or alleged error, misstatement, or misleading statement posted or published by an insured on its web site that results in: an infringement of another's copyright, trademark, trade dress, or service mark; any form of defamation against a person or organization; or a violation of a person's right of privacy.

So, for example, if the insured exposes a person's private medical records and that person sues the insured, EC 00 10 will provide a defense for the insured and pay the damages for which the insured is liable.

Security breach liability — liability arising from the unauthorized acquisition or disclosure of client information held within a computer system or otherwise (for example, hard copy); transmission of a virus to a third party by e-mail or other means The second insuring agreement pertains to security breach liability. If the insured is held liable for the acquisition of personal information (held within its computer system) by an unauthorized person, this insuring agreement offers insurance coverage to the insured. This agreement also applies to the unauthorized disclosure of such personal information.

Programming errors and omissions liability — liability arising from programming errors or omissions that ultimately disclose clients' personal information held within a computer system The next insuring agreement pertains to programming errors and omissions liability. Any actual or alleged programming error or omission that results in the disclosure of a client's personal information held within the insured's computer system may lead to a claim or a lawsuit against the insured. Insuring agreement three provides coverage for the insured. This agreement acts as complementary coverage for the previous insuring agreement.

Replacement or restoration of electronic data — expenses incurred to replace or restore electronic data or computer programs affected directly by a virus Suppose the insured is responsible for the loss of the electronic data or a computer program stored within its computer system? Such a loss could force a shutdown in services provided for a client's customers and cause a loss of business for the client. EC 00 10 offers coverage for replacement or restoration of electronic data wherein the policy will pay the cost to replace or restore the data or programs, the cost of data entry, and reprogramming costs.

Continued on page 10 February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

Extortion threats — ransom payments and other expenses incurred resulting directly from threats to send a virus to a computer system; disseminate the insured's proprietary information; inflict ransomware or other types of viruses to destroy, corrupt, or prevent normal access to the computer system; or publish clients' personal information

If the insured business itself has to cease operations or suspend e-commerce activities because of a threat against it with a computer virus or code, EC 00 10 will pay for the business income loss and for extra expense paid by the insured to get its business activities back in order.

Public relations expense — expenses incurred to restore the insured's reputation after being subject to negative publicity resulting directly from a virus or security breach

It is common knowledge that a company can be subject to an extortionist's threat to attack the company's computer system with a virus or some malicious code or a threat to prevent normal access to the system. The fifth insuring agreement in EC 00 10 offers to pay for the costs of hiring an entity to determine the validity and severity of an extortion threat, plus reward money paid to an informant that leads to the arrest and conviction of the extortionist. Any other reasonable expenses incurred by the insured for the fees and costs of negotiators and for the fees and costs of a company hired to protect electronic data from further threats are also covered.

Business income and extra expense — actual loss of business income and/or extra expenses incurred because of the interruption of the insured's e-commerce activities resulting directly from a virus or extortion threat

The seventh insuring agreement applies to public relations expense. If the insured has suffered negative publicity because of its responsibility for e-commerce security breaches or programming errors, or because the insured itself has allowed its private information to be publicized, there may be a decline in the reputation of the insured. In order to recapture the public's trust and future business, the insured will need a public relations campaign. EC 00 10 will pay for the fees and costs of a public relations firm to protect and restore the insured's reputation.

Security breach expense — expenses incurred to notify parties affected by a security breach, including overtime salaries paid to staff; fees and costs of the insured hiring a company to operate a call center; and reimbursing the insured for post-event credit-monitoring costs for victims of the breach.

EC 00 10 will pay for the loss of business to a client for which the insured is liable due to breaches of information security. The policy will also pay for a loss of business income the insured itself suffers due to the interruption of the insured's business resulting from an ecommerce incident.

AIANC’s STREET WISE

Page 10

Continued on page 11

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

The final insuring agreement of EC 00 10 is to pay for loss resulting from a security breach. The payment here would include costs to notify all parties affected by a security breach, the fees and costs of a call center to handle inquiries from parties affected by a security breach, and post-event credit monitoring costs for victims of a security breach. Since laws now require such activities, any insured that suffers a cyber-security event will need insurance to pay the costs of the activities.

Exclusions There are only 26 exclusions Selected Exclusions: Unintentional errors or omissions in the entry of “electronic data” Lightning, earthquake, hail, volcanic action, or any other act of nature Dispersal or application of pathogenic or poisonous biological or chemical materials

Unexplained or indeterminate failures Insufficient capacity, except for an “e-commerce incident” Shutdown of the internet, regardless of cause Power failure, reduction, or surge Threatened discharge of pollutants Employment practices Costs, fees, and other expenses incurred in establishing the existence of a “loss” How Much Does Your State Fine For Texting and Driving?

It could be anywhere from $20 to $10,000 for a firsttime offender—or no ban at all. http://www.motherjones.com/media/2013/10/numberstexting-and-driving#text-table

Bodily injury or physical damage to or destruction of tangible property

AIANC’s STREET WISE

Page 11

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

Download software only from websites you know and trust. Free stuff may sound appealing, but free downloads can hide malware. Make sure your web browser's security setting is high enough to detect unauthorized downloads. For example, use at least the medium security setting.

Even if you take precautions, malware can find its way onto your computer. So be on the lookout for these signs. Your computer runs slowly, drains its battery quickly, displays unexpected errors or crashes, it won't shut down or restart, it serves a lot of popups, takes you to web pages you didn't visit, changes your home page, or creates new icons or toolbars without your permission.

Protect Your Computer from Malware

If you suspect malware, stop doing things that require passwords or personal info, such as online shopping or banking. Use a different computer, maybe one at work or at your local library, to change your passwords. Update your security software and run a system scan. Delete files it flags as malware.

Malware is short for “malicious software." It includes viruses and spyware that get installed on your computer or mobile device without your consent. These programs can cause your device to crash and can be used to monitor and control your online activity. Learn more about how to avoid, detect, and get rid of malware.

If you can't fix the problem on your own, get help from a professional. Your computer manufacturer or internet service provider may offer free tech support. If not, contact a company or retail store that provides tech support.

Would it surprise you to learn that millions of computers in the US are infected with malware? That's a lot of computers. So what's malware, and why should you care?

Keep in mind, the most important thing you can do to prevent malware is to keep your computer software up to date. And remember, it's easy to find trusted information about computer security. Just visit onguardonline.gov, the federal government site to help you stay safe, secure, and responsible online.

Malware, short for malicious software, includes viruses and spyware that get installed on your computer or mobile device without you knowing it. Criminals use malware to steal personal information and commit fraud.

For example, they may use malware to steal the login information for your online accounts or to hijack your computer and use it to send spam. An infected computer can lead to serious problems, like identity theft.

The good news, there's a lot you can do to protect yourself and your computer. One of the most important steps you can take, install security software from a reliable company and set it to update automatically. The bad guys constantly develop new ways to attack your computer, so your software must be up to date to work.

Set your operating system and your web browser to update automatically too. If you're not sure how, use the help function and search for automatic updates. Don't buy security software in response to unexpected calls or messages, especially if they say they scanned your computer and found malware. Scammers send messages like these to trick you into buying worthless software, or worse, downloading malware.

What else can you do?

Use a pop up blocker, and don't click on links and popups. Don't click on links or open attachments in emails unless you know what they are, even if the emails seem to be from friends or family.

Answers to puzzle on page 21 AIANC’s STREET WISE

Page 12

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

How to build a sound Data Security Plan for your Agency Most companies keep sensitive information in their files, whether it's names, Social Security numbers, credit cards, or other account data that identifies customers or employees. Businesses often need this information to fill orders, meet payroll, or perform other business functions. But if the information falls into the wrong hands, it can lead to fraud or identity theft. The cost of a security breach can be measured in the loss of your customers' trust and perhaps even a lawsuit, which makes safeguarding personal information just plain good business.

So, let's get started. A sound data security plan is built on five key principles.

Take stock. Know what personal information you have in your files and on your computers.

Scale Down. Keep only what you need for your business.

Lock It. Protect the information that you keep.

Pitch It. Properly dispose of files or data you don't need anymore.

Plan Ahead. Create a plan to respond to security incidents. Let's walk through those five principles so you AIANC’s STREET WISE

can see how your company's practices measure up -and where you might want to make some changes.

Ready?

Effective data security starts with an assessment: Taking stock of what information you have and who has access to it. Understanding how personal information moves into, through, and out of your business and who has -- or could have -- access to it is essential to figuring out your security vulnerabilities.

So where do I begin?

Start by taking an inventory -- do an audit of what you've got. Your file cabinets and computers are a good place to start, but remember: Most businesses get personal information in a lot of different ways -- through websites, from contractors, from call centers. Inventory all computers, laptops, flash drives, disks, home computers, cell phones, and other equipment to find out where your company stores sensitive data.

But how can I keep track of all that personal information?

Talk to your sales department, your IT staff, and your HR office. Don't forget your accounting staff and any outside service providers you use. Then ask a few questions. Who sends personal information to your business and how do you receive it?

Page 13

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

How to build a Sound Data Security Plan Continued from page 13 We get personal information from customers, credit card companies, banks, and credit bureaus. Sometimes, it's sent through websites, sometimes by e-mail, and sometimes the U.S. Mail.

What kind of information do you collect at each entry point, and where do you keep it?

We get credit card information from clients. Our accounting department keeps customers' checking account numbers. And the information can be stored in, well, a lot of places -- in our central computer databases, on individual laptops, on disks and tapes, in their file cabinets, in our branch offices. Some employees might even have that information at home.

Remember to ask who has access to the information.

Which employees have permission to have it? Can anyone else get a hold of it? What about vendors who supply and update the software you use to process credit card transactions? Or contractors who operate your call center?

That's a lot to keep track of, but I can see that it's worth it.

It's a new way to think about information and security.

But it's not only do-able, it's essential.

Should I be handling all information in the same way?

Different types of information present different levels of risk. The fact is some information is more valuable to thieves. You need to pay special attention to how you keep personally identifying information: those Social Security numbers, that credit card or financial information, and other sensitive data. That's what crooks usually use to commit fraud or identity theft. REAL ESTATE AGENT: Do any laws require my company to keep sensitive data secure?

Yes. Federal laws like the Gramm-Leach-Bliley Act, the Fair Credit Reporting Act, and the Federal Trade Commission Act may require that businesses in your industry provide reasonable security for sensitive information. And you'll want to check into state and local laws, too.

We usually create a permanent file about our customers. That's where we keep information from the magnetic stripe on their credit cards. Are we putting their information at risk?

Yes, you are. Keep sensitive data only as long as you have a business reason to have it. Once that business reason is over, dispose of the data properly. If it's not in your system, it can't be stolen.

That makes sense to me. But we also collect a lot of Social Security numbers. How do I handle those?

Use Social Security numbers only for required and lawful purposes -- like reporting employee taxes. In this day and age, don't use Social Security numbers unnecessarily -- for example, as an employee or customer identification number or just because you've always used them.

But what if I have to keep certain information?

If you must keep information for business reasons or to comply with the law, develop a written record retention policy. Identify what must be kept, how it should be secured, guidelines on how long to keep it, and ways to dispose of it securely when you don't need it anymore.

I think our software saves credit card numbers. What can I do about that?

Check the default settings. Sometimes they're preset to keep information permanently. Change it to make sure you're not keeping anything you don't need.

Don't keep customer credit card information unless you have a business need for it. For example, it's not necessary to keep the account number and expiration date unless there is an essential business need.

Keeping this information -- or keeping it longer than necessary -- raises the risk that the information could be used to commit fraud or identity theft.

What's the best way to protect information that you absolutely have to keep?

The question I keep asking myself is what kind of information should I keep, and of course, what kind of information shouldn't I keep.

The answer really depends on the kind of information you're dealing with and how it's stored. The most effective data security plans deal with four important elements: physical security, electronic security, employee training, and the security practices of your contractors and service providers. Many data compromises happen the old-fashioned way-- through lost or stolen paper documents. So much of the time the best defense is a locked door or an alert employee.

That's the second principle -- Scale Down. Keep only what you need for your business. If you don't have a legitimate business need for sensitive information, don't keep it. In fact, don't even collect it in the first place. And if you do have a legitimate business need for the information, keep it only as long as necessary.

Store documents and files, CDs, floppy disks, zip drives, and tapes with personal information in a locked room or in locked file cabinets. Don't forget to include backup files, too. Then limit access to employees with a legitimate business need to have it. Keep track of how many keys there are and who has one.

Continued on page 15

AIANC’s STREET WISE

Page 14

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

How to build a Sound Data Security Plan Continued from page 14 Require that all files containing personal information be kept in locked cabinets, except when an employee is working on the file. Remind employees not to leave out sensitive papers when they're out of the office, whether it's for a short break, the day, or while they are on vacation.

Train your employees to put files away, log off their computers, and lock their file cabinets and office doors at the end of every day.

Control who has access to your offices. Tell employees what to do and who to call if they see somebody unfamiliar on the premises. If you have offsite storage facilities, limit access only to employees with a legitimate business need. Know if, and when, someone accesses the storage site.

What about computer security?

of your computer system, and follow the advice of experts in the field to make it safe.

Identify which of your computers or servers store sensitive information.

Then identify all connections to these computers and servers. Connections could include the Internet, electronic cash registers, computers at your branch offices, computers used by service providers that support your network, and wireless devices, such as inventory scanners or cell phones.

Assess how vulnerable each connection is to known or reasonably foreseeable attacks. Depending on your circumstances, appropriate assessments could range from a knowledgeable employee running off-the-shelf security software to an independent professional conducting a full-scale audit.

Don't store sensitive data on any computer with an Internet connection unless it's essential for conducting your business.

Computer security is everyone's business, not just the IT staff. Make sure you understand the vulnerabilities AIANC’s STREET WISE

Continued on page 16

Page 15

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

How to build a Sound Data Security Plan Continued from page 15 We encrypt the financial data customers submit on our website. But once we receive it, we decrypt it and then e-mail it to our branch offices. Is there a safer way for us to do this?

Glad you asked. Regular e-mail is not a safe way to send sensitive data. Any e-mail with information that could be used by fraudsters or ID thieves should be encrypted.

Another question. Do you have any tips on what kinds of computer passwords are best for security's sake?

Experts say the longer the password, the better.

Because simple passwords, like common dictionary words, can be guessed easily, insist that employees choose passwords with a mix of letters, numbers, and characters. Require that an employee's user name and password be different and that your employees change their passwords often.

Use password-activated screen savers to lock employee computers after a period of inactivity. Lock out users who don't enter the correct password within a certain number of log-on attempts. When installing new software, immediately change the vendor-supplied default password to a "strong" password that's at least eight characters long and contains both numbers and symbols.

You also need to talk with your employees. Be sure to explain to employees why it's against company policy to share their passwords or post them near their workstations.

Warn employees about callers who may try to trick them into giving out their passwords by pretending to be a member of your IT staff. Let employees know that these kinds of calls are always fraudulent and that no one in the company should be asking them to reveal their passwords.

Our account staff needs access to our database of customer financial information. To make it easier for people to remember, we use our company name as the password. Sounds like that could create a security problem?

Yes, it could. Hackers try words like "password," your company name, the software's default password, and other easy-to-guess choices. They also use programs that run through common words and dates.

Everyone in our office uses a laptop. Are there different rules for protecting laptops?

Before you look at how to protect sensitive information on a laptop, think about whether the information really needs to be stored on one at all. If not, delete it with a "wiping" program, which will overwrite the AIANC’s STREET WISE

data on the laptop. Deleting files using standard keyboard commands isn't good enough because they may still be on the laptop's hard drive.

Even if you must allow employees to work with sensitive data on laptops, you don’t have to store it on their machines. Consider storing sensitive information on a secure central computer that employees can access with their laptops. That way, the laptops function as terminals that display information from the central computer, not as storage sites. Add extra protection by requiring the use of a token, such as a "smart card," a thumb print, or some other biometric -- as well as a password -- for access to the central computer.

If a laptop will contain sensitive data, encrypt the data and configure it so users can't download any software or change the security settings without approval from your IT staff. Consider adding an "auto-destroy" function so that data on a computer that is reported stolen will be destroyed when the thief tries to get on the Internet.

And don’t forget about physical security. Restrict the use of laptops to employees who need them to perform their jobs, and require those employees to store laptops in a secure place. Even when laptops are being used, think about using cords and locks to secure them to employees' desks.

Train employees to think of their laptops as they would their wallets or cash. When they're on the road, they should never leave them visible in a car, sitting at a hotel luggage stand, or packed in checked luggage, unless they're told to by airport security.

What is a firewall? And how do I know if ours is good enough?

A firewall is software or hardware designed to block hackers from getting into your computer.

I've heard of a "border" firewall. What's that?

A "border" firewall separates your network from the Internet and could prevent an attacker from getting to where you store sensitive information. It's important to allow only trusted employees with a legitimate business need to access the network. To do this set the "access control" settings to determine who gets through the firewall and what they will be allowed to see. The protection a firewall provides is only as effective as its access controls. So review them periodically.

Maintain central log files of security-related information to monitor activity on your network so that you can spot and respond to attacks. If an attack occurs on your network, the log will help you identify which computers are compromised.

Monitor traffic for signs that someone is trying to hack in. Keep an eye out for activity from new users, multiple log-in attempts from unknown users, and higher-thanaverage traffic at unusual times of day (like nonbusiness hours).

Page 16

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

How to build a Sound Data Security Plan Continued from page 16 Also look at outgoing traffic for signs of a data breach. Watch for unexpectedly large amounts of data being transmitted from your system to an unknown user.

Investigate to make sure the transmission is authorized.

Most importantly, have a breach response plan in place.

Find out if you use wireless devices, such as inventory scanners or cell phones, to connect to your computer network or to transmit sensitive information.

Create a "culture of security" by implementing a regular schedule of employee training. Update employees as you find out about new risks and vulnerabilities. Make sure training includes employees at satellite offices, temporary help, and seasonal workers. If employees don't attend, consider blocking their access to the network.

Train employees to recognize security threats. Tell them how to report suspicious activity and publicly reward employees who alert you to vulnerabilities.

If you do, consider limiting who can use a wireless connection to access your network. You can make it harder for an intruder to access the network by limiting the wireless devices that connect to it.

Tell employees about your company policies dealing with keeping information secure and confidential. Post reminders in areas where sensitive information is kept, as well as where employees congregate. Make sure your policies cover employees who telecommute or access sensitive data from home or an offsite location.

Better still, consider encrypting the content to make it tougher for an intruder to read it. Encrypting transmissions from wireless devices to your computer network may prevent an intruder from gaining access through a process called "spoofing" -- impersonating one of your computers to get access to your network.

Alert employees to phone phising. Train them to be suspicious of unknown callers who claim to need account numbers to process an order or asking for customer or employee contact information. Make it office policy to double-check by contacting the company using a phone number you know is genuine.

You also should consider using encryption if you allow remote access to your computer network by employees or service providers, such as the companies that troubleshoot and update the software you use to process credit card purchases.

Require employees to notify you immediately if there is a potential security breach, like a lost or stolen laptop.

Your data security plan may look great on paper, but it's only as good as the employees who implement it.

Take time to explain the rules to your staff, and train them to spot security vulnerabilities. Periodic training emphasizes the importance your business places on data security. A well-trained workforce may be the best defense against ID theft and data breaches.

Check references and do background checks before you hire employees who will have access to sensitive data.

Ask every new employee to sign an agreement to follow your company's confidentiality and security standards for handling sensitive data. Make sure they understand that abiding by your company's data security plan is an essential part of their duties and the terms of their employment. Regularly remind employees of your company's policy -- and any legal requirement -- to keep customer information secure and confidential.

Know which employees have access to consumers' sensitive information. Pay particular attention to data like Social Security numbers and account numbers. Limit access to employees with a "need to know."

Have a procedure in place for making sure that workers who leave your employ or transfer to another part of the company no longer have access to the sensitive information they once did. Terminate their passwords immediately, and collect their keys and identification cards as part of the check-out routine.

AIANC’s STREET WISE

Discipline employees for security policy violations.

Your company's security practices depend on the people who implement them. That includes contractors and service providers, in addition to your employees.

Before you outsource any of your business functions -- payroll, Web hosting, customer call center operations, data processing, or the like -- investigate the company's data security practices and compare its standards to yours. If possible, visit its facilities.

In your contract with service providers, address security issues for the type of data they handle. Agree that they will notify you of any security incidents they experience, even if the incidents do not lead to your data being compromised.

Trash can be a gold mine for an identity thief.

Leaving credit card receipts, credit reports, papers, or CDs with personal information in a dumpster exposes your customers to the risk of identity theft and fraud. By properly disposing of sensitive information, you're doing your part to ensure that it can't be read or reconstructed.

So what's the safest way to get rid of documents or files we don't need any more?

It depends on the sensitivity of the information, the costs and benefits of different disposal methods, and changes in technology, as well as the nature and size of your business.

So with paper?

Continued on page 18 Page 17

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

How to build a Sound Data Security Plan Continued from page 17 Get rid of paper records by shredding, burning or pulverizing them before discarding. Put shredders throughout your office, including next to the photocopier.

What about computers?

When you're getting rid of old computers and portable storage devices, use wipe utility programs.

They're inexpensive and can overwrite the entire hard drive so that the files can't be recovered.

Can I just delete files using the delete key?

Deleting isn't good enough because the files can remain on the computer's hard drive, which means they could be retrieved easily.

What about employees who work from home?

Good point. Make sure employees who work from home follow the same procedures for disposing of sensitive documents, old computers, and any portable storage devices.

My company collects credit applications from customers. The form they use asks for a lot of financial information. Once we're finished with the applications, we're careful to throw them away. Is that good enough?

It's not, at least not for smart, security-minded companies. Ensure that sensitive paperwork is unreadable before you throw it away. Like I said, burn it, shred it, or pulverize it to make sure ID thieves can't steal it from your trash.

Security is important to your business and your customers. Taking steps to protect the data you're holding can go a long way toward preventing a security breach. Have a plan in place to respond to security incidents. Start by designating a senior member of your staff to implement it.

If a computer is compromised, disconnect it immediately from the Internet.

I've got good news for you. No, they're not going to cost you a fortune. And frankly, a breach can be much more expensive than implementing a plan up front. But there's no one-size-fits-all approach to data security.

What's right for you depends on the nature of your business and the kind of information you collect. Some of the most effective security measures -- using passwords, locking up sensitive paperwork, training your staff -- will cost you next to nothing. In fact, you'll find free or low-cost security tools at non-profit websites dedicated to data security. As I said, good security is just good business.

So when it comes to protecting personal information for your business, remember the following principles: Take Stock. Know what personal information you have in your files and on your computer.

Scale Down. Keep only what you need for your business.

Lock It. Protect the information that you keep.

Pitch It. Properly dispose of what you no longer need.

Plan Ahead. Create a plan to respond to security incidents.

For more computer security tips, tutorials, and quizzes for everyone on your staff, visit www.onGuardOnline.gov.

Attention: Insurance Companies, MGA’s, Premium Finance Companies & Insurance Industry Vendors: Check out the rates for the most cost effective method of keeping your message in front of your customers …

The Independent Insurance Agent.

Investigate security incidents immediately, and take steps to close off existing threats to personal information.

Consider whom to notify in the event of an incident, both inside and outside your organization. You may need to let consumers, law enforcement, customers, credit bureaus, and other businesses know they could be affected by a breach. In addition, since many states and the federal bank regulatory agencies have laws and guidelines dealing with data breaches, you should talk to your lawyer.

Ad Size

Monthly

Pre-Pay 6 Issues

Full Page (7.5” x 10”)

$275.00

$1450.00

Half - Page (7.5” x 5”)

$150.00

$800.00

Quarter-Page (3.75” x 5”)

$75.00

$375.00

1/8 - Page (3.75” x 2.5”)

$50.00

$250.00

I own this business. Will these precautions cost me a fortune?

Questions? Contact Eddie K. Emmett at eddie@fyiexpress.com or (770) 312-2342.

HU

AIANC’s STREET WISE

Page 18

UH

February, 2014

AIANC Membership has More Advantages!

Here’s what you get for only $250.00 per year: Free Disaster Planning Toolkit: At least one in four small businesses that close because of a major disaster never reopen. Here’s a new tool for your agency (& your commercial policyholders).

Free Micro-Mobile Site & QR Code Marketing Strategy. Scan this QR Code for a current example. This could be your agency!

Free registration to Annual Convention Free Agency’s Online Visibility Report complete with improvement tips If your website looks like this on a Smartphone

It could look like this for Free if you join

Free 30 second Agency Promotional Video. Click here to enjoy the one I created for my brothers’ agency.

This could be your agency!

Free Customizable Business Forms: These documents are free to download and customize for your own professional use.

Free Small Business Handbook: Everything you need to know to run your business, from equity to employees.

Free Marketing Templates: Sets of templates with a coordinated design including letterhead, envelopes, business cards, brochures, etc.

Free Office Poster Software: Templates to create your own custom office posters, all without any knowledge of design or graphical skills needed.

Free Monthly CSR Online Training using interactive quizzes, videos and worksheets Free Monthly Agency Owner’s Tips ‘n Tools

Free “How To” Booklets on Agency Management, Buy / Sell / Evaluate an Independent Agency, Internet Marketing & Social Media

Free HR Policy & Compliance Guidelines Free Claims Apps for Policyholders Free Agency Valuation Consultation Free Voice to be heard in Raleigh

All this & much, much more for only $250.00 per year

Join today at www.AllianceInsuranceAgentsNC.com

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

How to get Great at Selling

Stay on top of the latest innovations and technology.

Study the companies and individuals to whom you’re selling via the Internet and company websites.

by John Chapin The good news is: There is a clear, proven path to becoming great at selling, the bad news is: There are no short-cuts or magic bullets, it’s going to take some time, effort, and energy to get there.

4) Work on yourself.

No one is going to put a gun to your head and make you develop yourself personally and professionally. You have to take responsibility for that yourself and you must push yourself harder than anyone else can possibly push you.

Ten Steps to Sales Greatness 1) Do what the top salespeople do.

Note: It is important to own a knowledge library with sales and motivational books, audio and video programs, and other related information.

This is the most important step to becoming a top salesperson. It’s simple: If you take the same actions as the top salespeople, you will eventually also be a top salesperson. If you do the same things as a mediocre salesperson, you will be a mediocre salesperson. Find the top salespeople in your company and pick their brains. Next, find top salespeople in other industries.

Call these people on the phone, e-mail them, take them to lunch or dinner, do whatever you have to do to find out what they do and then do the same things.

Note 2: Find a mentor, hire a personal coach, or do both. You need someone to give you direction and hold you accountable.

5) Set goals.

You need goals to give your life direction and to give yourself a target. Your goals can be as simple as doing 125 percent of quota and making the annual awards trip, or as complex as a list of daily, weekly, monthly, and annual goals in all the major areas of your life.

Note: You also want to find out what they did to initially build their businesses. For example, top salespeople may not be doing massive cold calling or working crazy hours anymore, but that’s initially how they got to the top. Initial actions like these are some of the ones you want to copy.

Note: While it’s nice to have material goals, it is more important to have goals in which you become something.

“Becoming” goals do much more for your happiness, self-confidence, and self-esteem.

2) Learn everything you possibly can about the subject of selling.

Read, listen to programs, watch videos, and study everything you can get your hands on that relates to selling. Be a sponge and absorb as much information as you can. Realize that no matter how much you know, there’s always more to learn.

3) Learn everything you can about your industry and your prospects.

Join industry organizations. Read industry publications, newsletters, and magazines. Read “local” sources such as newspapers and other news bulletins that are printed in the geographic proximity of the companies you’re interested in. Look for breaking news, new products, new laws, regulations, or changes in legislation, interesting articles, stories on people making an impact in the industry, and other pertinent information.

AIANC’s STREET WISE

6) Record new ideas and develop new information.

Always have a recorder and/or pen and paper in your car, by your bed, at your desk, and everywhere you go so you can record good ideas as soon as they hit you.

Once you’ve captured some good ideas, develop them further and review your notes regularly.

7) Practice, drill, rehearse, and apply new ideas.

Take sayings, closes, and other information you like and make them your own. Practice them on peers, family members, and friends. Most important, look for places to use these new ideas in real-world selling situations.

8) Review motivational and educational information often.

Continued on page 21

Page 20

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

John Chapin Continued from page 20 Actively listening to tape and CD programs while taking notes is the optimal way to learn, however, passive listening in the car or elsewhere will also work.

To absorb tape and CD programs through passive listening, listen to them ten to fifteen times. With books and other written material, read them, take notes, highlight sections, and then review your notes and highlighted sections ten to fifteen times. With videos, watch them, take notes, and then review.

Again, you also want to be looking for ways to apply the new information.

9) Work hard and smart.

Obviously it’s better to work smarter than harder and yet, there are some areas, especially when you are just starting out, where smart work won’t replace hard work.

That said, here are the best ideas for working hard and smart: a) Do what the top salespeople do, as we’ve already discussed. b) Make more calls and work longer than anyone else. c) Be persistent. d) Use your time effectively. e) Stay organized. f) Come up with “smart” ideas and alternatives.

Note: Your overall objective early on is to be known as the hardest worker in the office. The fastest way to do this is by making more calls than anyone else and putting in more hours.

10) Pick the right product and company.

To be successful takes a good product and good support. If you are missing one or both, any success will be short-lived. Pick a product you can believe in and a company with people and support that will back you up.

It’s important to represent a product or service that works well, provides value to your customers, and makes you and your company look great. It’s also important to be able to get along with your manager and other people you work with.

John Chapin is an award winning sales speaker and trainer. For his free newsletter, or if you would like him to speak at your next event, go to: www.completeselling.com John has over 26 years of sales experience as a number one sales rep and is the author of the 2010 sales book of the year: Sales Encyclopedia. For permission to reprint, e-mail: johnchapin@completeselling.com.

AIANC’s STREET WISE

Solution to Valentine’s Day Word Search on page 12

Page 21

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

DEBUNKING AGENCY MULTIPLE CALCULATIONS We are Expert Witnesses on the subject of agency valuation as well as on other topics of insurance agency norms and common practices. When we encounter accountants or appraisers in courtroom situations, we can quickly discount those claim to valuations based on multiples is simply “industry averages” taken from articles published by others. When we encounter agency valuation professionals who understand the nuances that could make your $1 Million agency worth $400,000 or $4,000,000 but still try to oversimplify their results by multiples, we simply ask them how a single multiple addresses issues like:

Every generation of agency owners try to identify the value of their agencies – for estate planning, for buy-ins and buy-outs, for mergers, acquisitions, sales and internal perpetuation. They simply want to know how much they can expect to receive for the value of their asset when it comes time to cash out.

And, in every generation, some professionals with lists of initials next to their names try to provide the simplification that the agency owners desire by offering various methods as a solution to the valuation dilemma.

The most incompetent pseudo-professionals simply state one or several multiples and would lead you to believe that if you have a business called an insurance agency, that this multiple defines your value regardless of the complexion, location, history, size, staffing, or customer base of your particular business.

Personal Lines and Small Commercial agencies vs. Specialty and large lines agencies Agencies in which several accounts (potentially related to the agency owner) comprise high percentages of agency income.

The competent, but misled appraisers, who understand the methods of determining future earnings of a business to determine its value, still try to simplify the process by averaging the work that they have done to establish average multiples of a variety of measurements to try to help the agency owners determine their own values.

Agencies that are consistently profitable and growing vs. agencies of similar size who are stable, stagnant or shrinking or who overspend their revenues annually.

Agencies whose owners are the primary relationship manager for the majority of its specialty accounts vs. agencies whose owners are drivers and managers but whose customer base forms relationships with producers and other agency staff and would stay regardless of the continued presence of the current owners.

How much credibility would you allow me if I told you that every 3 bedroom house was worth $200,000? After all, if I’ve valued 10 or 100 or 1000 houses (properly) and the average was $200,000, would you feel comfortable buying your next house (or selling your current one) based on that valuation alone?

If not, why would you consider buying or selling an agency for two times (anything) based on someone telling you that it is an ‘industry average’ or an average of the transactions they have done in a year, five-year or ten year period? Who creates the industry average? We appraisers of insurance businesses certainly don’t share our results with each other? There is NO central resource for privately held business transactions in our industry and no one has the temerity to start one for fear of accusations of collusion. The only transactions that are readily available are those of the major publicly held companies who purchase $10 million and $20 million revenue (not premium) firms and above in which the price is made public (but not the conditions affecting the price that certainly changes the net value of the business being transacted over time).

AIANC’s STREET WISE

Realistically, the professional appraisers will take every one of these (among several hundred other factors) into consideration when creating a potential future earnings stream and a Risk Discount to apply to those potential earnings when creating a proper valuation for an agency. This process takes time and a great deal of data and questions and answers with the agency principals. Simplifying this process into a single or series of “multiples” does a disservice to the agency force because they might actually believe that a 1.75 or 2 times multiple would work as well as the valuation process, itself.

Page 22

Continued on page 23

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

DEBUNKING AGENCY MULTIPLE CALCULATIONS Continued from page 22 They will not. Valuations created by the multiples averages of revenue, net income (profits), earnings, or EBITDA (Earnings Before Interest, Depreciation and Amortization) are VALUATION VOODOO. Valuations done properly may be defined as a multiple for simplicity, but must be created by actually doing the work of revenue and expense trending and risk analysis to create the Future Earnings Potential that forms the basis of all proper valuations.

If you have a valuation done on your agency, demand to see the actual work effort and the assumptions made by the appraiser as a part of the published appraisal. If any of that work is defined by a multiple (instead of defined by the work effort and converted into a multiple), decline the valuation. If audited by the IRS, they will likely ask for the proof of that multiple. If you or the appraiser can’t provide that proof, they will invalidate the valuation and demand a different value for tax purposes.

We charge fairly for our valuation services. Many appraisers charge much more but few can afford to charge less because we do so many every year. But be warned. If any accountant or appraiser charges you more than a few hundred dollars for his time to provide you with a letter indicating that your value is defined by a certain “multiple” of some financial factor, you have been sold the equivalent of a bottle of Valuation Snake-Oil.

WHY VALUE YOUR AGENCY? When does agency value begin to carry a level of importance instead of being a ‘footnote’ in your business life?

Most agents are too busy making a living and putting out fires to worry about the value of their agencies. The value is only important when we die or if we’re ready to sell the agency! Most of us consider ourselves in the prime of life, certainly not worried about the esoteric “value” of a business that is making us a living every year.

The average of insurance agency owners increases every year. One day you are busily taking care of your clients then, when your 50th, 55th, or 65th birthday celebration happens, you realize that, like it or not, you’re no longer a ‘spring chicken’ and you have more years behind you in your career than in front of you.

Suddenly the value of your business asset becomes a higher priority!

Birthday progression and cakes that look more like brush fires than birthday celebrations every year are the easiest and most pleasant reminders that your agency value REALLY MEANS SOMETHING.

A worse indicator that you should be paying attention to your agency’s value occurs when friends of yours – contemporaries – start retiring or dying. THAT WILL SHOCK YOU AWAKE! Even worse is that first major illness that either you or a loved one experiences that is God’s way of telling you there are more important things in the world than coming to work every day.

The simplest definition of AGENCY VALUE:

At some point every agent will consider what his asset is worth -- now and for the future. And, “No, Virginia, there may be a Santa Claus, but there is no standard multiple that properly defines the value of any insurance agency.” The stories you’ve heard about 1.5 times, 2 times, or more is fiction. Someone has actually determined how much they can earn from an agency and defined it (backwards) in terms of a multiple (of something intelligible to the audience) to make it easier for an owner to understand. And, in its simplest terms, that is exactly what the value of your agency is, the earnings potential over a reasonable period of time for the person doing the valuation (whether that’s the existing owner or someone looking to purchase an agency).

If you are in your 30’s and 40’s and just getting into agency ownership your major awareness is that the agency that you are building will someday have a value that can provide you and your family with a more comfortable future. You need to determine the on-going value of your asset for purposes of estate planning while you and your family are still young.

If you are in your 50’s it’s time to posture your agency for a time in the future that you either internally or externally perpetuate your business either when you retire or while you are still young and vigorous enough to enjoy the fruits of your labors without necessarily stopping working. You may not be ready now for (or ever want) the rocking chair or golf clubs every day but wouldn’t it be nice (while you are still working) to have that nest egg mature and throw off money for you to invest or spend?

If you are in your 60’s or later, you have a more serious and pressing issue. You are ten or less years away from wanting or needing to retire and you have built an asset the value of which you must identify to determine how and what you are going to do with it. I have met many agents who have made their fortunes and careers without the need for the value of the agency. That value will accrue to their beneficiaries, families or next generations of owners. Yet, without knowing the value of the agency you may be passing more taxes and liabilities than assets to generations to whom you think you are performing a favor.

Continued on page 24

AIANC’s STREET WISE

Page 23

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

PERSONAL AND COMMERCIAL LINES PREMIUM FINANCING MADE BETTER BY



No automated phone system – when you call, we answer.



Solid foundation – in premium financing since 1969.



One company to handle all your premium financing needs: Personal Auto, Commercial Auto, Worker’s Compensation, Homeowners, General Liability, and more.



Fast and simple agent quoting software, with full upload / download capability for contracts, payments, and account information.



Full integration available with Jenesis Agency Management software.

We view your agency as a partner, and will work hard to make sure you think of us the same way.

Please contact us for more information:

800-233-2036 or Mail@MPPOnline.com Why Value Your Agency?

Partnership retirement and funding those buy-outs require valuation ahead of the buyout to properly assure funding options.

Continued from page 23 Whether or not you are ready or serious about selling or perpetuating your agency, I recommend that you either create your own valuation or assign us to identifying the value of your agency – NOW while the pressure for taking action may not be imminent. The cost is not high and annual valuation updates are minimal compared to the pressing need that will occur if something bad happens that requires an immediate valuation.

Valuation Types: Agency Consulting Group, Inc. values agencies annually for internal purposes (estate planning, key man insurance, buy/sell agreements, partnership values and buy-ins, ESOPs). If you’d like to do it yourself, we even have a tool that will allow you to estimate your own value. Call us and we’ll talk to you about the best way to value a Going Concern.

Perpetuation plans that transition ownership from one generation of owners to another also requires regular valuation. Both old and new owners become very aware of the ingredients that increase or decrease the value of the business.

AIANC’s STREET WISE

Of course, acquisitions, mergers and sales of agencies seriously require third party valuation to assure both buyer and seller of the value of the asset under the specific circumstances of the transaction being considered.

Call Al or David at 856 779 2430 and we’ll be happy to discuss your particular situation and how best to determine the value of your business.

I’ve never seen a headstone that read “He Was A Great Insurance Agent” and working every day until he’s 90; is not a testament to hard work, it’s a definition of someone who didn’t plan his life very well.

Agency Consulting Group, Inc. THE PIPELINE | DEBUNKING AGENCY MULTIPLE CALCULATIONS | Copyright © 2014 Agency Consulting Group, Inc. Agency Consulting Group, Inc. | 800-779-2430 http://agencyconsulting.com

Page 24

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

How Does the ACA Affect our W-2 Forms? Q&A

By Robin Thomas, Managing Editor W-2 forms must be provided to your employees by January 31, and this is the second year health insurance should be reported on them. Make sure you know what the ACA requires employers to report and find out if your organization is exempt from the requirement.

Q: We know we have to provide W-2 forms to all of our employees by the end of this month. However, are we required to provide information about our health insurance on the form? We have fewer than 250 employees.

A: Probably not. The Patient Protection and Affordable Care Act (commonly referred to as the Affordable Care Act or ACA) does require most employers to report the cost of health care coverage under an employer-sponsored plan on employees’ Form W-2, Wage and Tax Statement, but it exempts smaller employers at least temporarily. (As a reminder, you are required to provide the Form W-2 to each employee every year by January 31. The form details how much compensation the employee earned and the income, Social Security, and Medicare taxes withheld.)

The provision was supposed to take effect for taxable years beginning on or after January 1, 2011, meaning that W-2s issued for 2011 earnings would have been affected (the W-2s due by January 31, 2012). The Internal Revenue Service (IRS) delayed the requirement until January 2013 because it determined that employers needed additional time to make necessary changes to their payroll systems and procedures to comply with this new requirement. See IRS Notice 2010-69; IRS Notice 2012-9.

This year, employers must continue to report the cost of employer-provided health insurance to employees on the Form W-2. The health care costs should be recorded in section 12 of the Form W-2, using code “DD.” In general, the amount reported should include both the portion paid by the employer and the portion paid by the employee. The IRS indicates that the reporting is intended for informational purposes since employerprovided health care currently is not taxable and that it provides employees useful and comparable consumer information on the cost of their health care coverage.

See IRS Notice 2012-9.

Tax experts have suggested the purpose of the Form W-2 reporting requirement is so that the IRS can verify that individuals have health care coverage as required beginning in 2014 under the ACA.

For certain employers, the IRS continues to delay the health care costs reporting requirement for an indefinite period. These temporarily exempted employers will not have to report the costs for future calendar years until the IRS publishes guidance giving at least six months advance notice of any change to this so-called “transition relief.” The IRS has not yet published any guidance, so if an organization falls into any of the 7 categories covered by the transition relief (listed below), it does not have to report the health insurance on the W-2s. However, these employers still may report the costs on a voluntary basis.

See IRS Notice 2012-9.

The transition relief applies to the following: (1) employers filing fewer than 250 Forms W-2 for the previous calendar year; (2) multi-employer plans; (3) Health Reimbursement Arrangements; (4) dental and vision plans that are not integrated into another health care plan or give participants the choice of declining the coverage or electing it and paying an additional premium; (5) self-insured plans of employers not subject to COBRA continuation coverage or similar requirements; (6) employee assistance programs, on-site medical clinics, or wellness programs for which the employer does not charge a premium under COBRA continuation coverage or similar requirements; and (7) employers furnishing Forms W-2 to employees who terminate before the end of a calendar year and request a Form W-2 before the end of that year. See IRS Notice 2012-9.

So, since your organization has fewer than 250 employees, and assuming you filed fewer than 250 Forms W-2 for 2012, then you likely do not have to report your health insurance information on the forms.

The IRS has provided guidance on the health care reporting requirements online at http://www.irs.gov/uac/Form-W-2-Reporting-ofEmployer-Sponsored-Health-Coverage.

YOU CAN TRUST PPS Information provided in HR Matters E-Tips is researched and reviewed by the HR experts at Personnel Policy Service as well as employment law attorneys. However, it is not intended as legal advice.

Readers are encouraged to seek appropriate legal or other professional advice.

Please note that the information in every issue of HR Matters E-Tips is the original, copyrighted work of The reporting requirement also will make it easier for Personnel Policy Service, Inc., and is protected under the IRS to impose the 40% “Cadillac tax” required by the U.S. copyright laws. As such, you may not reprint or ACA that takes effect in 2018 on employer-provided publish in any format any article or portion of article from health insurance benefits that cost more than $10,200 HR Matters E-Tips without the express permission of for individual coverage and $27,500 for family coverage.

Personnel Policy Service, Inc. AIANC’s STREET WISE Page 25 February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

The rates remaining in effect are the result of a 2009 settlement signed by Goodwin that lowered car insurance rates to just below 2006 levels and delivered refunds totaling over $50 million to approximately one million North Carolinians.

The Department of Insurance employs 20 sworn state law enforcement officers dedicated to investigating and prosecuting claims of insurance and bail bonding fraud. Since Insurance Commissioner Wayne Goodwin took office in 2009, criminal investigators have made more than 800 arrests, resulting in 430 criminal convictions thus far. These efforts have delivered more than $55 million in restitution and recoveries for victims.

An estimated 10 cents of every dollar paid in premiums goes toward the payment of fraudulent claims.

To report suspected fraud, contact the Department of Insurance Criminal Investigations Division at 919-8076840. Callers may remain anonymous. Information is also available at www.ncdoi.com.

"The fact that today's car insurance rates are no higher than they were in 2006 shows that North Carolina continues to have a strong and stable auto insurance market," Goodwin said. "In North Carolina, we have more than 150 active auto insurance companies competing for our consumers' business, and we have some of the lowest average rates in the country."

According to the National Association of Insurance Commissioners, North Carolina has the sixth-lowest average auto insurance costs in the nation.

The current filing will be reviewed by Department of Insurance experts. Additionally, the Department of Insurance is reviewing the auto insurance territories, which is required to be done every 10 years under state law.

Tryon Woman Arrested for Alleged Insurance Fraud RALEIGH -- Insurance Commissioner Wayne Goodwin today announced the arrest of Shawnda Janae Pack, 20, of 601 East Howard St., Tryon; she was charged with one count each of felony insurance fraud and attempting to obtain property by false pretense.

Department of Insurance criminal investigators allege that on Jan. 8, 2014, Pack filed a fraudulent insurance claim with GEICO for damage to her vehicle from a collision with a deer one day earlier. Investigators allege that the same damage had been documented as the result of a January 2013 accident in which Pack was arrested for reckless driving and hit and run.

Pack was arrested with the assistance of the Tryon Police Department on Jan. 31 and placed in the Polk County Jail under a $16,000 bond.

Commissioner Goodwin Announces $27.2 Million in Recoveries and Savings for North Carolinians

N.C. Auto Insurance Companies Ask for No Rate Change RALEIGH -- Insurance Commissioner Wayne Goodwin today announced that the Department of Insurance has received the annual auto insurance rate filing from the North Carolina Rate Bureau. The Rate Bureau, which is not part of the Department of Insurance and represents the auto insurance companies writing business in the state, submitted a filing on Jan. 31 that requests no change in rates for private passenger car and motorcycle insurance policies for the coming year.

RALEIGH -- Insurance Commissioner Wayne Goodwin today announced that the North Carolina Department of Insurance saved or recovered more than $27.2 million for North Carolinians in 2013.

"The Department of Insurance is committed to fighting fraud, assisting North Carolinians with insurance questions or complaints, and holding members of the insurance industry to the highest professional standards," said Goodwin. "I am very proud of our track record of recovering and saving money for our citizens."

Several divisions of the Department of Insurance contributed to the total recoveries and savings: Continued on page 27

AIANC’s STREET WISE

Page 26

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

The Consumer Services Division, which receives consumer inquiries and complaints about homeowners, auto, life and other insurance-related issues, handled approximately 59,900 calls and 6,800 written complaints from the public. Through these calls and complaints, the division was able to help consumers recover more than $8.77 million in benefits from insurance companies.

and more) to ensure compliance with state laws and regulations. Through these exams, the Division ordered $293,654 returned to policyholders.

Health Insurance Smart NC returned $3,493,417 to consumers as a result of services provided. Health Insurance Smart NC, the department's newest consumer assistance program, assists people with questions about health insurance and helps consumers file complaints or appeals with their health insurance companies, identify enrollment opportunities and request external reviews for denied claims. In 2013, Smart NC specialists took more than 15,000 calls, responded to 1,599 consumer complaints and handled 247 external review requests.

Investigators seek public assistance in locating additional suspects

SHIIP, the Seniors' Health Insurance Information Program, assisted 99,813 consumers with general Medicare questions and helped more than 3,249 Medicare recipients apply for the Low-Income Subsidy program that provides savings for Medicare prescription drug costs. The estimated cost savings for Medicare beneficiaries was approximately $10.8 million. SHIIP offers free, unbiased information about Medicare, Medicare prescription drug coverage, Medicare Advantage, long-term care insurance and other health insurance issues. SHIIP's trained volunteers provide one-on-one counseling in all 100 counties of North Carolina.

The Criminal Investigations Division employs 20 sworn law enforcement officers dedicated to investigating claims of insurance fraud and criminal concerns associated with bail bonding, motor clubs, collection agencies and premium finance companies. In 2013, the work of these criminal investigators led to 231 arrests, 85 criminal convictions and more than $3.9 million in restitution and recoveries. Another 152 cases are currently pending in court.

The Agent Services Division regulates all licensed agents, brokers, limited representatives, appraisers, adjusters, premium finance companies, collection agencies, motor clubs, bail bondsmen, surety bondsmen and bail bond runners authorized to do business in North Carolina. Oversight includes licensure qualification, pre-licensing education, continuing education, telephone inquiries, complaint investigations and agency examinations. In 2013, the Agent Services Division investigated more than 1,466 complaints and recovered $7,229 in premium funds for consumers.

The Market Regulation Division conducts both routine and targeted market conduct examinations on foreign and domestic licensed companies (insurance companies, premium finance companies, HMOs, PPOs AIANC’s STREET WISE

More information, downloadable publications and an online suggestion box are available at www.ncdoi.com.

Three Arrested in Alleged Staged Accident Ring in Bertie and Hertford Counties

RALEIGH -- Insurance Commissioner Wayne Goodwin today announced the arrests of three people in an alleged insurance fraud scheme involving a series of staged auto accidents in Bertie and Hertford Counties.

The Department of Insurance requests assistance from the public in locating two additional suspects in association with this case.

Travis O'Neil Basnight, 28, of 736 Cremo Road, Colerain, was charged with four counts of insurance fraud, four counts of obtaining property by false pretense and one count of filing a false police report. Basnight was arrested on Jan. 28 and placed under a $40,000 bond.

Stephanie Privott, 33, of 216 Old Highway 13 South, Winton, was charged with one count each of insurance fraud, attempting to obtain property by false pretense and filing a false police report. Privott was arrested on Jan. 23 and placed under a $5,000 bond.

Tinesha Ronica Winston, 22, of 550 Sally Freeman Road, Colerain, was charged with one count each of insurance fraud and attempting to obtain property by false pretense. Winston was arrested on Jan. 23 and placed under a $5,000 bond.

Department of Insurance criminal investigators allege that over the course of several years, the defendants conspired to defraud several insurance companies of thousands of dollars by submitting fraudulent documentation in support of insurance claims for property damage and injuries caused by more than 30 staged accidents in Bertie and Hertford Counties.

Investigators are seeking additional suspects in association with this case.

Shemelle Hymn, 19, of 107 Cardinal Lane, Windsor, is wanted for insurance fraud and attempting to obtain property by false pretense.

Ashley Anastasia Perry, 27, of 103 Kelly Park Lane, Ahoskie, is wanted for one count each of insurance fraud and attempting to obtain property by false pretense.

Fred Ledel Riddick, 43, of 319 Brown Road, Colerain, is wanted for once count each of insurance fraud, attempting to obtain property by false pretense and filing a false police report.

Continued on page 28 Page 27

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

Cumberland County Residents Accused of Unlicensed Bail Bonds Activity

Five Arrested in Alleged Staged Accident Scam in Buncombe County

RALEIGH -- Insurance Commissioner Wayne Goodwin today announced the arrests of Brunhilde B. Ross, 55, of 195 North Riley Road, Fayetteville, and Michael Worriax, 39, of 514 Town St., Hope Mills.

Investigators seek public assistance in locating an additional suspects

Department of Insurance criminal investigators allege that on May 6, 2012, Ross, while acting as a licensed bail bondsman, attempted to apprehend a suspect wanted on a bail violation using the assistance of Worriax, who is not a licensed bail bondsman.

Ross was arrested on Jan. 28 and charged with one count of aiding and abetting an unlicensed bail bondsman. She was placed under a $3,000 bond and is due in court on March 3.

Worriax was arrested on Jan. 28 and charged with one count of acting as a bail bondsman without a license. He was placed under a $3,000 and is also due in court March 3.

Reidsville Man Arrested for Alleged Insurance Fraud RALEIGH -- Insurance Commissioner Wayne Goodwin today announced the arrest of Paisley Andrew Harvell, Jr., 36, of 802 Walters St., Reidsville; he was charged with two counts of insurance fraud.

Department of Insurance criminal investigators allege that Harvell filed duplicate and fraudulent insurance claims for vandalism damage to his 2003 Chevy Trailblazer in an attempt to defraud Direct Insurance Company and Progressive Insurance Company. The claims were denied and insurance representatives referred the case to the Department of Insurance.

Harvell was arrested by the Rockingham County Sheriff's Office on Jan. 24 and placed under a $10,000 bond.

Charlotte Collection Agency Accused of Operating Without a Permit RALEIGH -- Insurance Commissioner Wayne Goodwin today announced the arrests of Jacqueline Dianne Okomba, 45, of 3406 Anastasia Court, Charlotte, and Laurence Sessum, 41, of 19 Decker St., Buffalo, N.Y. Both were charged with one count of operating a collection agency without a permit.

Department of Insurance criminal investigators allege that in January 2014, Okomba and Sessum were in violation of N.C.G.S. 58-70-1, which requires a person to obtain a permit from the North Carolina Department of Insurance to operate a collection agency.

Okomba and Sessum were arrested on Jan. 23 in Mecklenburg County. Okomba was placed under a $2,500 bond, and Sessum was placed under a $1,000 bond.

AIANC’s STREET WISE

RALEIGH -- Insurance Commissioner Wayne Goodwin today announced the arrests of five people in an alleged insurance fraud scheme involving several staged auto accidents in Buncombe County. The Department of Insurance requests assistance from the public in locating two additional suspects in association with this case.

Lisa Ann Dalton, 19, of 50 Wilbar Ave., Apt. 14E, Asheville, was charged with one count each of insurance fraud and aiding and abetting in connection with obtaining property by false pretense. Dalton was arrested on Jan. 22 and released under a $2,000 unsecured bond.

Tyquawn Saddam Kuwade Davidson, 21, of 111 Cedar Hill Road, Asheville, was charged with one count each of insurance fraud and aiding and abetting in connection with obtaining property by false pretense.

Davidson was arrested on Jan. 19 and released under a $2,000 unsecured bond.

Barbara Ann Lee, 19, of 50 Wilbar Ave., Apt. 7G, Asheville, was charged with two counts each of insurance fraud and aiding and abetting in connection with obtaining property by false pretense. Lee was arrested on Jan. 22 and placed under a $4,000 secured bond.

Kendra Patrice Mooney, 24, of 50 Wilbar Ave., Apt. 14F, Asheville, was charged with three counts each of insurance fraud and obtaining property by false pretense. Mooney was arrested on Jan. 20 and released under a $60,000 unsecured bond.

Jeremy Jermain Wise, 22, of 4428 Deaverview Road, Asheville, was charged with two counts each of obtaining property by false pretense and insurance fraud. Wise was arrested on Jan. 23 and released on a written promise to appear.

Department of Insurance criminal investigators allege that the defendants conspired to defraud GEICO, Progressive Insurance Company and National General Insurance Company of several thousand dollars by submitting fraudulent documentation in support of insurance claims for property damage caused by several staged accidents in the Asheville area.

Investigators are seeking additional suspects in association with this case.

Christina Renee Allen, 33, of 69 Hillside St., Weaverville, is wanted for one count each of insurance fraud and aiding and abetting in connection with obtaining property by false pretense.

Continued on page 29 Page 28

February, 2014

More “Tips ‘n Tools” for Insurance Agencies at www.AllianceInsuranceAgentsNC.com

Sonia Venita Clay, 44, of 50 Wilbar Ave., Apt. 11E, Asheville, is wanted for one count each of insurance fraud and obtaining property by false pretense.

Three Arrested in Alleged Staged Accident Scam in Mecklenburg County RALEIGH -- Insurance Commissioner Wayne Goodwin today announced the arrest of three people in an alleged insurance fraud scheme involving a staged auto accident in Mecklenburg County.

Lillington Man Accused of Filing a False Insurance Claim RALEIGH -- Insurance Commissioner Wayne Goodwin today announced the arrest of Joel Lane Elliott, 49, of 865 Lincoln McKay St., Lillington; he was charged with one count each of obtaining property by false pretense and insurance fraud.

Shane Coleman Glenn, 29, of 3909 Philadelphia Church Road, Marshville, was charged with one count of insurance fraud. Glenn was arrested by the Union County Sheriff's Office on Jan. 7 and placed under $1,000 bond.

Department of Insurance criminal investigators allege that on Oct. 29, 2013, Elliott filed a fraudulent auto insurance claim with National General Insurance Company for vandalism damage to his vehicle.

Investigators allege that the damage was not the result of vandalism, but that the vehicle was damaged prior to Elliott increasing insurance coverage several months prior.

Wesley Allen Scarbrough, 30, of 4211 Briarcliff Dr., Monroe, was charged with one count of conspiracy to commit insurance fraud. Scarbrough was arrested by the Mecklenburg County Sheriff's Office on Jan. 14 and placed under a $5,000 bond.

Christina Marie Stegall, 30, of 3909 Philadelphia Church Road, Marshville, was charged with one count of insurance fraud. Stegall was arrested by the Union County Sheriff's Office on Jan. 3 and placed under $15,000 bond.

Elliott was arrested by the Harnett County Sheriff's Office on Jan. 20 and released after a pre-trial hearing.

Raleigh Woman Accused of Filing False Insurance Claims RALEIGH -- Insurance Commissioner Wayne Goodwin today announced the arrest of Keeshiona Rena King, 42, of 841 Dalewood Drive, Raleigh; she was charged with six counts each of obtaining property by false pretense and insurance fraud.

Department of Insurance criminal investigators allege that between March 14, 2012, and Aug. 28, 2012, King filed six fraudulent insurance claims for cancer wellness screenings that she did not receive. AFLAC was in the process of paying King for the claims when representatives were notified by the health provider that King had not received any screenings.

King was arrested in Wake County on Jan. 15 and placed under a $10,000 bond.

NCDOI Arrests Raleigh Woman for Alleged Health Insurance Scheme RALEIGH -- Insurance Commissioner Wayne Goodwin today announced the arrest of Sunia WilsonSmith, 35, of 509 Dacian Road, Raleigh; she was charged with 12 counts each of obtaining property by false pretense and insurance fraud.

Department of Insurance criminal investigators allege that between March 15, 2012, and Sept. 28, 2012, Wilson-Smith filed 12 fraudulent insurance claims for cancer wellness screenings that she did not receive.

AFLAC was in the process of paying Wilson-Smith for the claims when representatives were notified by the health provider that she had not received any screenings.

Wilson-Smith was arrested in Wake County on Jan. 16 and placed under a $30,000 bond.

AIANC’s STREET WISE

Department of Insurance criminal investigators allege that the defendants conspired to defraud RepWest Insurance Company of several thousand dollars for injuries and property damage caused by a staged motor vehicle accident on Jan. 19, 2013 in Mecklenburg County.

Goodwin's Statement on Homeowners Insurance Rate Request RALEIGH -- The North Carolina Department of Insurance received a homeowners insurance rate filing from the N.C. Rate Bureau in the late afternoon of Friday, Jan. 3. The N.C. Rate Bureau, on behalf of all companies writing homeowners insurance in the state, has requested a statewide average rate increase of 25.3 percent, varying by territory, with a requested effective date of Aug. 1, 2014.

Insurance Commissioner Wayne Goodwin issued the following statement: "New homeowners insurance rates went into effect in July 2013. I am appalled that the insurance companies would request another increase just six months later. I believe the insurance companies should withdraw this rate filing immediately. If they do not, the insurance companies should expect a full hearing on this matter; I will not entertain any settlement negotiations. I urge North Carolina homeowners to take advantage of the public comment period and let their insurance companies know what they think about the notion of another homeowners insurance rate increase.

Also, I take offense at the insurance companies' concerted efforts to file this request late on a Friday afternoon, when they think the public won't be paying attention."

Page 29

February, 2014

This QR Code will load the SehMobile phone app, which provides contact information for customer support as well as other features.

Contact SehMobile at 800-768-0907 or duke@sehhey.com Go to www.sehmobile.com & Use Promo Code: AIANC