Prish Thakkar: Cyber Defenses and Cyber Insurance: A Holistic Approach to Cyber Risk Management
The landscape of cyber threats has significantly expanded in terms of volume, complexity, and impact of attacks over the past few years. Consequently, regardless of their size, industry, or geographic location, the vast majority of companies prioritize protection against these threats and primarily strive to implement robust cyber defense measures to counteract them.
However, given the difficulty of preventing and anticipating all current and future forms of threats, especially the methods attackers use to bypass defenses and introduce ransomware into a system, organizations worldwide also tend to adopt cyber insurance policies to safeguard their operations in the event of a successful intrusion. According to the State of Ransomware 2023 Study conducted by Sophos in early 2023, 91% of global companies have some form of cyber insurance.
If 47% of companies declare having subscribed to an independent insurance policy, and 43% have opted for insurance integrated into broader coverage, independent and integrated cyber policies are the two main types in the market. It is crucial for companies to choose coverage that aligns with their specific needs and risks, ensuring the best possible protection for their data and operations.
Before subscribing to insurance, conducting an audit of existing solutions is essential, questioning whether they benefit from top-notch first-line cybersecurity protection. Indeed, this can impact their access to cyber insurance and the selection of a policy that best suits their particular needs.
The quality of cyber defenses significantly influences corporate coverage. First-line cybersecurity measures can notably affect the adoption and choice of a cyber insurance policy for companies. According to the aforementioned study, 95% of respondents specifically cite that the quality of implemented cyber defenses has a direct impact on the insurance they subscribe to, affecting both the cost and terms of the policy, ensuring access to the coverage that suits them best.”
“According to the study, 60% of organizations with cyber insurance state that the quality of their existing defenses influenced their ability to secure coverage. Furthermore, 62% mention its impact on the policy’s cost, and 28% note its effect on insurance contract terms. Ensuring the most comprehensive and robust protection layer is essential to save money and select insurance that best meets the business’s requirements.
Interestingly, cybersecurity measures play a more significant role in obtaining independent cyber insurance compared to integrated coverage. 71% of those with independent policies note that the quality of their protection influenced their coverage, while only 49% of those with integrated policies believe it impacted their ability to contract cyber insurance. Conversely, the performance of security measures has a greater influence on the cost of integrated policies [67%] than independent insurance [58%].
Therefore, companies should prioritize assessing the effectiveness and robustness of their cybersecurity solutions before seeking cyber insurance tailored to their needs. This approach enables them to select the most appropriate policy and negotiate favorable costs and terms.”
Prish Thakkar is the Regional Director, of East Africa at Sophos.
Follow us on Telegram, Twitter, and Facebook, or subscribe to our weekly newsletter to ensure you don’t miss out on any future updates. Send tips to info@techtrendske.co.ke
