Cyber Insurance: What Businesses Need To Know

Cyber insurance has become a crucial safety net for businesses, particularly in the face of escalating ransomware attacks. This financial safeguard promises protection against the often devastating consequences of cyberattacks. However, as ransomware incidents have surged, so too have the premiums for cyber insurance.

Fortunately, recent trends suggest that the cost of cyber insurance may be stabilising. This stabilisation could signal that businesses are maturing in their approach to cybersecurity and that more effective cybersecurity programs are taking hold.

More Than Just A Safety Net

For many businesses, cyber insurance is more than just a financial safety net - it's an essential component of their broader cybersecurity strategy. Research indicates that companies with cyber insurance are generally better equipped to handle data breaches and cyberattacks compared to those without coverage.

One significant advantage is the support that insurers provide. Insurers often work closely with their clients to prepare them for potential incidents, offering guidance on best practices and response strategies.

The market for cyber insurance is changing rapidly, and both insurers and businesses must stay abreast of these changes to ensure adequate protection. One key challenge is evaluating cyber insurance coverage against emerging threats.

Our recent research, based on a survey of over 1,000 companies across EMEA and the USA, reveals that while nearly all respondents had cyber insurance, only 40% were confident that a ransomware attack would be covered.

Furthermore, among those who had made claims for ransomware attacks, only half felt they had recovered the full costs. This discrepancy underscores the need for businesses to fully understand their policy details and coverage limits.

Evaluating Cyber Insurance Coverage

When evaluating cyber insurance coverage, it’s essential for businesses to have a clear understanding of what their policy covers and excludes. Typically, cyber insurance can cover first-party and third-party losses, including the costs of responding to an attack.

However, policies generally do not cover legal or regulatory losses. Businesses must consider what level of coverage is necessary based on their specific risks and the potential commercial impact of a breach.

To make informed decisions, businesses should collaborate closely with their cybersecurity team and legal advisors. It’s crucial to scrutinise the fine print of insurance policies, clarify coverage details, and understand the insurer’s expectations regarding cybersecurity measures and incident response capabilities.

Some companies have resorted to taking out multiple policies to mitigate risks, but this approach can lead to more complex and time-consuming claims processes.

Innovations In Cyber Insurance

As cyber threats change, so too must the strategies employed by insurers. Cyber insurance companies are increasingly collaborating with cybersecurity professionals to gain better insights into emerging threats and targeted industries. This collaboration helps insurers develop more accurate risk assessments and actuarial tables, which are crucial for pricing policies appropriately.

Moreover, insurers are moving beyond traditional paper-based surveys to validate their clients' cybersecurity capabilities. They are now incorporating more rigorous checks, such as verifying cybersecurity certifications and conducting penetration tests. Some insurers offer discounts based on these validations, incentivising businesses to strengthen their security posture.

Cyber Insurance & Operational Resilience

Cyber insurance is a critical component of operational resilience. While it provides financial protection against cyber incidents that traditional security measures may not fully address, it is not a substitute for robust cybersecurity practices. Instead, it should complement existing security controls by offering financial reassurance in the event of a breach.

In addition to financial protection, cyber insurance can serve as a benchmark for assessing a company’s cybersecurity capabilities relative to industry peers. This benchmarking can provide valuable insights into areas where a company may need to enhance its security measures.

Weighing The Cost Of Cyber Insurance

When considering the cost of cyber insurance, businesses should evaluate their potential risks and the impact of various types of coverage. Understanding what is covered under the policy and what is not - such as legal or regulatory costs - is crucial. Businesses should also assess the commercial impact they can bear and determine the level of coverage needed to mitigate that impact effectively.

This decision should be made collaboratively, involving both the cybersecurity team and the broader business leadership. Regularly reviewing and updating the insurance policy in light of growing threats and changes in the business environment is also essential.

Cyber insurance remains a vital tool for businesses seeking to manage the financial risks associated with cyberattacks. As cyber threats continue to evolve, so too must the strategies employed by both insurers and businesses.

By staying informed about policy details, leveraging innovations in the insurance market, and integrating cyber insurance with comprehensive security measures, businesses can better explore the complexities of digital risk management.

Greg Day is VP & Global CISO at Cybereason

Image: Philip Oroni

You Might Also Read: 

Cyber Insurance: The Cost Of Doing Business:

DIRECTORY OF SUPPLIERS - Cyber Insurance:


If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Advances In Recognising Deepfakes
A Critical Flaw Exposing Google Cloud Servers »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 7,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Lakeside Software

Lakeside Software

Lakeside Software is how organizations with large, complex IT environments can finally get visibility across their entire digital estates and see how to do more with less.

Bayshore Networks

Bayshore Networks

Bayshore Networks was founded to safely and securely protect Industrial IoT (IIoT) networks, applications, machines and workers from cyber threats.

Wooxo

Wooxo

Wooxo provides business security and continuity solutions to protect business data for organisation of all sizes.

Crossword Cybersecurity

Crossword Cybersecurity

We work with research intensive European university partners to identify promising cyber security intellectual property from research that meets emerging real-world challenges.

Cyber London (CyLon)

Cyber London (CyLon)

CyLon is a leading cyber security accelerator and seed investment programme. We help entrepreneurs from across the globe to build cyber security businesses, raise investment, and develop partnerships.

CyberSec.sk (CSSk)

CyberSec.sk (CSSk)

CyberSec.sk is the Slovak portal bringing the latest cyber security news, politics, tips and instructions on how to protect the internet.

Ioetec

Ioetec

Ioetec's mission is to connect users to their IoT devices securely, ensuring these devices remain safe to use in our increasingly connected world.

Scanmeter

Scanmeter

Scanmeter helps identifying vulnerabilities in software and systems before they can be exploited by an attacker.

FortifyData

FortifyData

FortifyData is the next generation of cyber risk management–a comprehensive platform that continuously evaluates your third-party, internal and people risks.

NightDragon

NightDragon

NightDragon is a venture capital firm investing in innovative growth and late stage companies within the cybersecurity, safety, security, and privacy industry.

nsKnox

nsKnox

nsKnox is a fintech-security company, enabling corporations and banks to prevent fraud and ensure compliance in B2B Payments.

Atlant Security

Atlant Security

Atlant Security is a cyber and IT security company offering consulting and implementation services.

NewAE Technology

NewAE Technology

NewAE Technology is revolutionizing the hardware security market by making every engineer and designer aware of side-channel power analysis and glitching as important attack vectors.

Fibernet

Fibernet

Fibernet's innovative solutions in the fields of cybersecurity and fiber optics range from telecommunications infrastructure to small business cybersecurity.

L&T Technology Services (LTTS)

L&T Technology Services (LTTS)

L&T Technology Services Limited (LTTS) is a global leader in Engineering and R&D (ER&D) services.

Oxford Information Labs (OXIL)

Oxford Information Labs (OXIL)

Oxford Information Labs brings together world-class software programmers and policy experts to provide a unique mix of expertise and hands on technical solutions.