Executive Snapshot

How to create a Written Information Security Program (WISP) for Alaska SB 134 compliance. A guide for insurance agencies and licensees.

  • Align telemetry, human process, and automation.
  • Instrument every control with real owners.
  • Transform insights into runbooks operators can execute.
Building a WISP for Alaska SB 134: A Step-by-Step Guide

Legacy Gaps

  • Static controls that cannot flex with live incidents.
  • Orphaned processes without telemetry back to leadership.
  • Manual documents that fall out-of-date within weeks.

Ultra Moves

  • Instrumented responses tied to Borealis Ultra runbooks.
  • Shared situational picture across exec, ops, and engineering.
  • Continuous validation with readouts your board will trust.

The core of the Alaska Insurance Data Security Act is the Written Information Security Program (WISP). Here is what yours needs to contain.

What is a WISP?

A WISP is not a software tool; it is a document. It outlines the administrative, technical, and physical safeguards you use to protect Nonpublic Information (NPI).

The 4 Pillars of a Valid WISP

  1. Risk Assessment: You must document how you identify risks (e.g., lost laptops, phishing, office break-ins).
  2. Access Control: Who has access to NPI? Why? How do you terminate access when they leave?
  3. Vendor Management: How do you vet the software and third parties you use?
  4. Incident Response: What exactly will you do if a breach occurs? Who do you call?

Common Mistakes

  • Using a generic template: If your WISP says you use "biometric scanners" and you don't, you are creating a liability.
  • Forgetting paper records: SB 134 covers physical files too. Do you have locking file cabinets?

Need a WISP Audit?

We can review your existing program or build one from scratch for a fixed fee.

See SB 134 Packages

Borealis Field Case // Arctic Ops

A Northern operator faced compounding pressure across cloud, OT, and lean staffing. We rebuilt their response stack around Ultra modules, synced telemetry to a single console, and cut containment time by 64%.

Need an Ultra-grade response plan?

We’ll pressure-test your environment, script the containment moves, and stay on the net until signal improves.