Cyber Insurance: Good News & Bad News

Even though the cybersecurity insurance market is barely 20 years old, cybersecurity insurance companies have already collectively grossed more than $2 billion in premiums. 

This implies both good news and bad news. The bad news is the demand for cybersecurity insurance demonstrates that hackers and data thieves are stepping up their game. Businesses and industries of all sizes are being targeted. 

The good news is that large organisations and small businesses alike are taking proactive steps to protect themselves from cyber threats.

As the cybersecurity insurance market continues to expand, SMBs will want answers to questions before procuring this insurance for their operations. Below are a few common questions companies consider before selecting a provider.
How likely is it for an SMB to be targeted by a cyber attacker?

By one measure, more than half of all cyberattacks target SMBs. Sure, SMBs typically do not store or maintain the same volume of data that is held by larger companies. But that doesn’t mean they are out of the wood. Small businesses generally have fewer resources and defensive technologies as compared to their larger peers. In other words, SMBs hold less data, but that data is easier to steal.

What does cybersecurity insurance cover?
Cybersecurity insurance policies can cover multiple different losses and liabilities associated with a data breach. This includes business downtime, extortion, data recovery, and fines levied by regulatory bodies. 
Some policies go even further to provide against third-party liabilities. Prime examples include a failure to protect their confidential data and legal fees. Of course, exact coverage details will depend on your policy. So be sure to suss out the specifics during your initial conversations.

Do all cybersecurity insurance carriers cover the same types of losses and liabilities?
Coverages from different insurance carriers do overlap, but some carriers offer different services and underwriting policies than others. Many of the world’s top commercial general liability insurance carriers(including Liberty Mutual, Beazley Insurance Co., Chubb Ltd.) are now offering cybersecurity riders on their policies.

Other insurance entities have been formed by individuals that have more technical knowledge of cybersecurity threats. Companies like Root9B, RSA, IBM Security, Dell Secure Works, and Palo Alto Networks all boast top-notch technical cybersecurity expertise. 

Meanwhile, companies like CyberPolicy offer SMBs an opportunity to shop through cyber insurance companies according to specific needs. Carriers include Hiscox, Aspen Insurance, and Hanover.

How much should an SMB budget for cybersecurity insurance?
Cybersecurity insurance policy premium costs will vary as a function of each SMB’s network systems environment. Annual premiums for one  million dollars of coverage will generally be between $5,000 and $50,000. Given that an SMB incurs an average loss of $200,000 from a single data breach, these premiums are readily justified on a cost-benefit basis.

Will cybersecurity insurance companies offer cyber threat abatement consulting services?
Many cybersecurity insurance companies work closely with their clients to detect likely cyber penetration points and to make suggestions to close off those gaps. 

Root9B, for example, will pursue cyber attackers that have broken into a system and will expunge those attackers while closing off the gaps that let them in. Dell Secure Works audits client systems to identify weaknesses. Palo Alto Networks works to stop a security breach as it is happening with threat-intelligence and other protection tools. 

Cybersecurity insurers are as interested in ending data breaches as their clients are in preventing them, and good carriers will always work with their clients to reduce threat levels.

What is an SMB’s ultimate risk if it fails to procure cybersecurity insurance?
Believe it or not, the worst case scenario is bankruptcy. The costs associated with even a low-level data breach are often large enough to wipe out an SMB’s profits. 

Cybersecurity insurance is critical. Without this essential service, you could suffer a cyberattack that kills your SMB for good.

The Times T2

You Might Also Read: 

Companies Are Buying Cyber Insurance 'in mad panic':

Cybersecurity Tips For Smaller Businesses:

Cyber Insurance Report 2017 - 2018 (£):


 

 

« Employees Are Key To Cybersecurity
Russia Will Create Its Own Internet »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Practice Labs

Practice Labs

Practice Labs is an IT competency hub, where live-lab environments give access to real equipment for hands-on practice of essential cybersecurity skills.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

a1qa

a1qa

a1qa specializes in the delivery of full-cycle software QA and application testing services.

Allianz Commercial

Allianz Commercial

Allianz Commercial is the center of expertise and global line of Allianz Group for insuring mid-sized businesses, large enterprises and specialist risks.

Mobile Guroo

Mobile Guroo

Mobile Guroo is a strategy and systems integrator for Enterprise Mobility Management projects.

Sogeti

Sogeti

Sogeti deliver solutions that enable digital transformation and offer cutting-edge expertise in Cloud, Cybersecurity, Digital Manufacturing, Quality Assurance, Testing, and emerging technologies.

Accredia

Accredia

Accredia is the national accreditation body for Italy. The directory of members provides details of organisations offering certification services for ISO 27001.

IntelligInts

IntelligInts

IntelligInts provide 24×7 threat monitoring, hunting, alerting, and mitigation in our world class Security Operations Center.

Cyber Security Advisor

Cyber Security Advisor

Notice how sophisticated the cybersecurity market is. Think how would you pick the security provider, assess your company, and be sure of your security decisions? Cyber Security Advisor is the answer!

Securd

Securd

Securd takes opportunities away from your cyber adversaries. Cloud-delivered zero-trust DNS firewall and web filtering protection keep your business network and remote employees safe.

Active Countermeasures

Active Countermeasures

Active Countermeasures believe in giving back to the security community. We do this through free training, thought leadership, and both open source and affordable commercial tools.

Internet Crime Complaint Center (IC3)

Internet Crime Complaint Center (IC3)

The Internet Crime Complaint Center provide the public with a reporting mechanism to submit information to the FBI concerning suspected Internet-facilitated criminal activity.

FiVerity

FiVerity

FiVerity provides financial institutions with cyber fraud defense to combat a dangerous and growing threat - the convergence of fraud-related theft with sophisticated, high-volume cyber attacks.

Mayer Brown

Mayer Brown

Mayer Brown is a global law firm. We have deep experience in high-stakes litigation and complex transactions across industry sectors including the global financial services industry.

DruvStar

DruvStar

DruvStar provides B2B cybersecurity around threat management to strengthen businesses across attack vectors.

Supra ITS

Supra ITS

Supra ITS is a leading full-service technology partner offering IT Consulting, Cloud Services, 24x7 Managed IT & Cybersecurity Services, and IT Project Support.

Dynamic Standards International (DSI)

Dynamic Standards International (DSI)

Dynamic Standards International is a global standards development organization which develops certifiable ‘dynamic standards’ that pace with fast-evolving landscapes.

Swise

Swise

Swise is a Cyber security and compliance platform for your small business. Simplify and automate your security and compliance with our AI-powered platform.