Susep introduces new financial auditing and cybersecurity regulations

The Superintendência de Seguros Privados (Susep) has initiated new regulatory measures aimed at enhancing financial oversight and cybersecurity within the Brazilian insurance sector.

Through public consultations, Susep is proposing changes to accounting regulations for supervised entities in the S3 segment. The proposal suggests that, for prudential reasons, Susep may require independent audits of interim financial statements. This measure is intended to ensure the reliability and regularity of accounting information during periods requiring deeper oversight.

Additionally, Susep has instituted Resolution No. 95 to strengthen technological controls. The new Audit Log Management Policy (PGRAC) mandates the collection, storage, and analysis of audit trails and logs generated by systems and equipment used by the agency. This policy aims to increase traceability, assist in security incident investigations, and reduce response times to technical issues. The rules apply to both internal and third-party technology resources connected to Susep's infrastructure, requiring continuous data collection in a centralized and protected environment.