How To Ensure You Collect Money On Your Cyber Insurance Policy

How To Ensure You Collect Money On Your Cyber Insurance Policy

What do you know about securing cybersecurity insurance in Miami & Fort Lauderdale? Do you know whether you need it? Is it included in your general coverage? If not, can improved cybersecurity qualify you for coverage or even lower premiums?

The cybercrime landscape is getting more unpredictable and complex every day. Cybercriminals are finding more effective ways to infiltrate business networks and steal critical business data—but you already know all this.

Cybercrime is a serious and expensive threat. Ponemon found that the average cost of a data breach in the United States hit a record high of $8.64M in 2020.

That’s why so many businesses are considering investing in cybersecurity insurance, which is designed to help businesses cover the recovery costs associated with any kind of cybersecurity incident

What Is Cyber Insurance?

Cyber insurance is a type of stand-alone coverage. It’s designed to help businesses cover the recovery costs associated with any kind of cybersecurity incident including:

• Business interruption costs
• Forensic analysis to identify the attack source
• Ransom demands and negotiations
• Costs to regain access or restore data
• Legal costs
• Public relations services
• Notification of clients and/or regulatory bodies
• Credit monitoring services for affected individuals

Types Of Cyber Insurance

Breach And Event Response Coverage

A very general and high-level form of coverage, this covers a range of costs likely to be incurred in the fallout of a cybercrime event, such as forensic and investigative services; breach notification services (which could include legal fees, call center, mailing of materials, etc.); identity and fraud monitoring expenses; public relations and event management.

Regulatory Coverage

Given that a range of organizations (such as The Securities and Exchange Commission, the Federal Trade Commission, the Department of Homeland Security, and more) have a hand in regulating aspects of cyber risk in specific industries, there are usually costs that come with defending an action by regulators.

This covers the costs associated with insufficient security or “human error” that may have led to a privacy breach. Examples may include an employee losing a laptop or e-mailing a sensitive document to the wrong person.

Liability Coverage

This type of coverage protects the policyholder and any insured individuals from the risks of liabilities that are a result of lawsuits or similar claims.

Put simply, if you’re sued for claims that come within the coverage of the insurance policy, then this type of coverage will protect you.

Cyber Extortion

This type of cybercrime event is generally a form of a ransomware attack, in which a cybercriminal keeps encrypted data inaccessible (or, alternatively, threatens to expose sensitive data) unless a ransom is paid.

Coverage of this type addresses the costs of consultants and ransoms, including cryptocurrencies, for threats related to interrupting systems and releasing private information.

Does Cyber Insurance Offer Complete Protection Against Cybercrime?

A common misconception is that a cyber insurance policy is a catch-all safety net, but that’s simply not the reality. Without a comprehensive cybersecurity strategy in place, a business may not qualify for a policy in the first place.

Furthermore, in the event of a hack, a business may not qualify for full coverage if their cybersecurity standards have lapsed, or if they can be found to be responsible for the incident (whether due to negligence or otherwise).

The core issue is that as cybercrime becomes more common and more damaging, insurers will become more aggressive in finding ways to deny coverage. It’s in the interest of their business to pay out as little and as rarely as possible, which means the policies will tend to rely on a series of complicated clauses and requirements that covered parties have to comply with.

A key example of this is when Mondelez International was denied coverage for the $100 million of damage they incurred from the NotPetya attack. Their insurer, Zurich Insurance, cited the obscure “war exclusion” clause, claiming that Mondelez was a victim of a cyberwar.

This is not an isolated incident. As discovered by Mactavish, the cyber insurance market is plagued with issues concerning actual coverage for cybercrime events:

• Coverage is limited to attacks and fails to address human error
• Claims are limited to losses that result directly from network interruption, and not the entire period of business disruption
• Claims related to third-party contractors and outsourced service providers are almost always denied

All this goes to show why business owners need to look carefully at the fine print of their cyber insurance policy and ensure their cybersecurity standards are up to par. No one should assume they’re covered in the event of a cybercrime attack—after all, for every $1 million paid in premiums, insurance companies only pay out $320,000 in claims.

Is Cyber Insurance Easy To Buy?

Not necessarily—as cybercrime has become more common, and ransomware costs have become steeper, cyber insurance carriers have become hesitant to provide coverage as widely as they did even a few years ago.

After all, these carriers need to continue to make a profit, which they won’t be able to do if they keep paying out massive ransoms on behalf of their clients. Many insurance providers have begun drawing a clear line between normally covered losses, and those incurred by cybercrime-related events.

That means that if your cybersecurity doesn’t meet the standards of your insurance provider, you may not be as well covered as you think. Or, you may not even qualify for coverage in the first place.

Keep in mind that your cyber insurance provider will ask a lot of questions about your cybersecurity standards to ensure you’re worth covering.

35 Questions Your Cyber Insurance Carrier Is Going To Ask…

1. Does your business have a policy against opening unverified email attachments?
2. Does your business keep malicious and spam emails out of staff inboxes?
3. Does your business double-check email attachments before they are delivered?
4. Does your business have an email threat protection solution in place?
5. Does your business have an endpoint protection solution in place?
6. Does your business use an Endpoint Detection & Response (EDR) solution?
7. Does your business use multi-factor authentication (MFA) or Two-Factor Authentication (2FA) on all user accounts?
8. Does your business test cybersecurity standards with regular vulnerability scans?
9. Does your business prohibit incoming connections using hardware and software firewalls?
10. How many users have local administrator rights enabled?
11. Do you have a content filtering solution?
12. Does your business monitor traffic into and out of the network?
13. Do your staff members have access to a password manager?
14. Are admin accounts tracked and monitored to limit and log access?
15. Do you have recent and tested backups of all mission-critical data, applications, and configurations?
16. Do you have encryption for backups (both at rest and in transit)?
17. Do you store backups on and offsite?
18. Are your offsite backups protected by an air-gap and separate authentication mechanism?
19. Does your business use a cloud syncing service? (e.g. OneDrive, DropBox, SharePoint, Google Drive)
20. Is your cloud data backed up?
21. Can staff members access business email on their personal devices?
22. Can staff members send or receive PII, ePHI, or PCI data through business email?
23. Do you have an email encryption solution in place?
24. Is your staff regularly tested and trained on phishing and other social engineering attack vectors?
25. Do you have a log aggregation solution in place?
26. Do you have a Security Incident and Event Management (SIEM) system in place?
27. Do you have an update and patch management system in place?
28. Does your business monitor its network 24/7?
29. Do you work with a third-party IT company?
30. Do you rely on a third-party Security Operations Center (SOC)?
31. Is all data encrypted (at rest and in transit)?
32. Does your business have a documented policy for addressing unsafe conduct by employees?
33. Is your business compliant with applicable regulations and standard systems?
34. Do you have a policy in place for limiting resigning or terminated employees’ access to business data?
35. Do you have a Mobile Device Management policy in place to limit risks posed to business data by your employees’ personal devices?

Qualifying For Cyber Insurance Starts With Your Cybersecurity

In light of the challenges facing the cyber insurance market, providers are focusing increasingly on managing and reducing risk. Effective cybersecurity can help you reduce your cyber risk which, in turn, makes you a more attractive prospect for cyber insurance coverage.

Advanced Cybersecurity Solutions

You should start by deploying advanced, next-gen protection. Having robust security solutions in place and correctly deployed will reduce your cyber risk.

At this point, it’s essentially a prerequisite to secure cyber coverage, with managed detection and response (MDR) services, endpoint or extended detection and response (EDR) technologies, and next-gen endpoint protection being the most common requirements.

Furthermore, you’ll also want to implement multi-factor authentication, which is usually a requirement to secure coverage. It’s so simple and effective a security measure that almost all carriers require it.

Mitigate Insider Risks

Don’t forget to consider insider risks as well. Many cyber insurance policies will negate any coverage in the event of an insider-based breach. That means that one unaware employee could cost you millions in damages.

The fact is that 90% of cybersecurity incidents can be traced back to human error

That’s why you need to train your staff members. directly affect the future of your business. If you’re breached, the best case scenario is thousands, if not millions of dollars in damage.

You can’t expect a firewall and antivirus solution to keep you 100% secure. Cybercriminals know that the user is the gap in a business’ cyber armor—that’s where they’re going to aim.

Invest In Data Continuity

Lastly, make sure you consider business continuity. The best way to stop a cyberattack from turning into a full breach is to prepare in advance. Often, after an organization experiences a breach, they realize they could have avoided a lot of cost, pain, and disruption if they had an incident response plan in place.

Having a detailed plan that enables you to minimize the impact of an incident will reduce your cyber risk, making you a more attractive prospect to insurance providers.

Need Help Qualifying For Cybersecurity Insurance?

Meeting the stipulations laid out by cybersecurity insurance providers may not be easy depending on the state of your cybersecurity posture. 4it can equip you with a range of Sophos solutions to help you improve your approach to cybersecurity.

Our team provides cybersecurity and technology services for businesses like yours—we are available to help you develop a robust cybersecurity defense. We can ensure you qualify for a policy and minimize the chance that you’ll have to make a claim on your cybersecurity insurance.

Get in touch with our team to get started.