{"id":876,"date":"2021-10-05T16:08:00","date_gmt":"2021-10-05T16:08:00","guid":{"rendered":"https:\/\/dev.cryptoloc.au\/?p=876"},"modified":"2023-10-03T06:18:03","modified_gmt":"2023-10-03T06:18:03","slug":"why-are-cyber-insurance-premiums-going-up-and-how-can-you-get-a-better-deal","status":"publish","type":"post","link":"https:\/\/127.0.0.1\/why-are-cyber-insurance-premiums-going-up-and-how-can-you-get-a-better-deal\/","title":{"rendered":"Why are cyber insurance premiums going up, and how can you get a better deal?"},"content":{"rendered":"\n<p><strong>It may not have attracted as much attention as the coronavirus, but ransomware has become a pandemic unto itself \u2013 and it\u2019s sending the price of cyber insurance skyrocketing. Here\u2019s what you can do to keep your premiums as low as possible.&nbsp;<\/strong>&nbsp;&nbsp;<\/p>\n\n\n\n<p>Cyber insurance is a relatively new addition to the insurance market that helps to protect organisations from the fallout of being hacked.&nbsp;<\/p>\n\n\n\n<p>According to the Insurance Council of Australia, cyber insurance is typically available to cover:&nbsp;<\/p>\n\n\n\n<ul>\n<li>Costs related to the loss of or damage to data&nbsp;<\/li>\n\n\n\n<li>Content-related claims related to data&nbsp;<\/li>\n\n\n\n<li>Costs to prevent future breaches&nbsp;<\/li>\n\n\n\n<li>Fines and penalties imposed by regulators&nbsp;<\/li>\n\n\n\n<li>Public relations costs&nbsp;<\/li>\n\n\n\n<li>Liability for denial of service from or access to electronically provided data&nbsp;<\/li>\n\n\n\n<li>Costs associated with cyber extortion reimbursement&nbsp;<\/li>\n\n\n\n<li>Compensation to third parties for failure to protect their data&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>But at a time when more organisations are clamouring for these sorts of protections, cyber insurance carriers are raising premiums and limiting the coverage they\u2019re willing to offer.&nbsp;<\/p>\n\n\n\n<p>In a recent report entitled&nbsp;<a href=\"https:\/\/www.howdengroup.com\/sites\/g\/files\/mwfley566\/files\/inline-files\/Howden%20Cyber%20Insurance%20-%20A%20Hard%20Reset%20report_1.pdf\"><em>Cyber insurance: A hard reset<\/em><\/a>, multinational insurance broker Howden reported that global insurance pricing had increased by an average of 32 per cent from June 2020 to June 2021.&nbsp;<\/p>\n\n\n\n<p>Similarly, insurance broker Marsh\u2019s latest&nbsp;<a href=\"https:\/\/www.marsh.com\/au\/services\/insurance-market-and-placement\/insights\/global-insurance-market-index-q3-2020.html\"><em>Global Insurance Market Index<\/em><\/a>&nbsp;found that cyber insurance premiums shot up 56 per cent in the US and 35 per cent in the UK from the second quarter of 2020 to the second quarter of 2021.&nbsp;<\/p>\n\n\n\n<p>Marsh reports that&nbsp;<a href=\"https:\/\/www.afr.com\/technology\/cyber-attacks-cause-insurance-premiums-to-go-viral-20210503-p57oia\">Australian businesses, specifically, have been slugged<\/a>&nbsp;with cyber insurance premium jumps of up to 30 per cent, and those prices are expected to just keep rising.&nbsp;&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Why are cyber insurance premiums going up?&nbsp;<\/h3>\n\n\n\n<p>Essentially, cyber attacks are becoming too common for the insurance sector, which relies on businesses insuring themselves against scenarios that might&nbsp;<em>not<\/em>&nbsp;end up happening for its profits. With hacks becoming a virtual inevitability, safeguarding businesses against them is an increasingly shaky prospect for insurers.&nbsp;&nbsp;&nbsp;<\/p>\n\n\n\n<p>According to both the Howden and Marsh reports, it\u2019s the frequency and severity of ransomware attacks \u2013 in which cybercriminals take control of a network and demand payment to hand it back \u2013 that are driving cyber insurance prices skyward.&nbsp;<\/p>\n\n\n\n<p>The number of ransomware attacks worldwide shot up 170 per cent from the first quarter of 2019 to the fourth quarter of 2020, according to Howden, while the average cost of a ransomware attack is up 145 per cent in 2021 compared to 2020.<\/p>\n\n\n\n<p>There are a number of reasons for&nbsp;<a href=\"https:\/\/cryptoloc.com\/blog\/cyber-crime-rise-of-cyber-cartel\">the rise of ransomware<\/a>, including the availability of low-cost ransomware kits and ransomware-as-a-service (RaaS) offerings that enable users to launch ransomware attacks without any technical expertise on their part, effectively lowering the barrier to entry to the cybercrime \u2018industry\u2019.&nbsp;<\/p>\n\n\n\n<p>The proliferation of double extortion is also a factor \u2013 in a double extortion attack, not only do cybercriminals take control of your system and demand payment for its return, but they also threaten to leak the data they\u2019ve stolen from you, and demand a separate payment not to do so. Ransomware group REvil had the dubious honour of being the first to use the double extortion tactic in June 2020, and it\u2019s since taken off worldwide.&nbsp;<\/p>\n\n\n\n<p>As is so often the case, the COVID-19 pandemic is also partly to blame. The sudden explosion in remote work and the acceleration in digitalisation that has come with that has&nbsp;<a href=\"https:\/\/cryptoloc.com\/blog\/employees-home-wifi-connection-data-risk\">exponentially increased the attack surfaces<\/a>&nbsp;that are available to cyber criminals, and made it harder for breaches to be discovered.&nbsp;<\/p>\n\n\n\n<p>IBM and Ponemon\u2019s&nbsp;<a href=\"https:\/\/www.ibm.com\/security\/data-breach\"><em>Cost of a Data Breach Report 2021<\/em><\/a>&nbsp;found that data breaches were 17.5 per cent more costly where remote work was a factor, and that organisations that had more than half of their workforce working remotely took 58 days longer to identify and contain breaches, on average.<\/p>\n\n\n\n<p>Not only has the rash of ransomware attacks sent cyber insurance premiums soaring, it\u2019s also affected the coverage that some insurers are willing to offer. In May, French insurance giant AXA announced it would no longer write policies that reimburse ransomware victims \u2013 and were&nbsp;<a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/insurer-axa-hit-by-ransomware-after-dropping-support-for-ransom-payments\/\">immediately hit with a retaliatory ransomware attack<\/a>&nbsp;\u2013 while&nbsp;<a href=\"https:\/\/www.washingtonpost.com\/technology\/2021\/06\/17\/ransomware-axa-insurance-attacks\/\">other insurers are declining to take on new clients<\/a>, or capping their coverage at about half of what they used to offer.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How can you lower the cost of your cyber insurance policy?&nbsp;<\/h3>\n\n\n\n<p>A wide range of factors can impact your cyber insurance premium, including the size of your business and its annual revenue, the industry you operate in, and the type of data you have access to.&nbsp;<\/p>\n\n\n\n<p>But in much the same way that a high-risk driver will have to pay more for car insurance, the Howden report found that insurers are demanding more from business\u2019 cybersecurity, and will charge organisations that are more likely to fall victim to a breach a higher premium \u2013 or refuse to insure them altogether.&nbsp;<\/p>\n\n\n\n<p>This is in line with&nbsp;<a href=\"https:\/\/insurancecouncil.com.au\/wp-content\/uploads\/2021\/08\/082721_SUB_CyberSecurity-Consultation-AR.pdf\">a recent letter from the Insurance Council of Australia<\/a>&nbsp;to the Department of Home Affairs, in which the Insurance Council wrote: \u201cInsurance underwriters place a strong focus on a customer\u2019s risk management and security culture when reviewing, assessing and pricing the risk. Effective risk management, including a strong internal security culture, can be the most effective defence against threats.\u201d&nbsp;<\/p>\n\n\n\n<p>This might seem like a no-brainer, but it hasn\u2019t always been this way. In the past, insurers might have just asked potential clients to fill out a questionnaire about their cybersecurity practices, and taken them at their word that their house was in order.&nbsp;<\/p>\n\n\n\n<p>In today\u2019s environment, however, these insurers are partnering with outside firms to vet potential clients\u2019 cybersecurity protocols, and demanding to see evidence that they have appropriate controls in place and are following best practices, including using multi-factor authentication, implementing zero trust policies, and backing up and encrypting their data.&nbsp;<\/p>\n\n\n\n<p>For instance, the IBM and Ponemon report on the cost of data breaches found that organisations using high standard encryption \u2013 at least 256 AES,&nbsp;<a href=\"https:\/\/cryptoloc.com\/blog\/cybercrime-jargon-explained\">at rest and in transit<\/a>&nbsp;\u2013 had an average breach cost that was 29.4 per cent lower than organisations using low standard or no encryption. Insurers, who are likely to be aware of that data, might then offer broader cover and better pricing to organisations that can demonstrate they\u2019re using strong encryption technology.&nbsp;<\/p>\n\n\n\n<p>Companies who take a proactive approach by providing cyber security education for all employees, including advice on how to identify suspicious emails and requests, are also likely to be looked upon favourably by insurers.&nbsp;<\/p>\n\n\n\n<p>\u201cCarriers\u2026 are demanding extremely high cyber security standards,\u201d says Shay Simkin, Global Head of Cyber at Howden.&nbsp;<\/p>\n\n\n\n<p>\u201cImpeccable cyber security hygiene is therefore crucial for companies looking to purchase cyber insurance cover. Not only does it open up capacity availability, it also helps provide more favourable pricing and terms.\u201d&nbsp;<\/p>\n\n\n\n<p>Or, as the Insurance Council of Australia puts it: \u201cCapabilities that indicate a strong risk management and security culture may, for instance, include internal data handling and internet usage policies for all employees across the business, adequate prevention, detection, and response security capabilities and internal data breach incident response plans. Guidance and resources that support businesses, especially small businesses, to protect themselves against cyber threats can strengthen risk management and security practices.\u201d&nbsp;<\/p>\n\n\n\n<p>This isn\u2019t a set-and-forget proposition, either. In many cases, insurers will reassess their policies every 12 months, so even after you use your organisation\u2019s preparedness to get a good deal on cyber insurance, you\u2019ll need to ensure you maintain those high standards and keep the proper procedures in place.&nbsp;<\/p>\n\n\n\n<p>Then again, why wouldn\u2019t you? Cyber insurance is not, in and of itself, a cybersecurity strategy, and no matter how low your premium is and how great the terms of your coverage are, it should only be used as a last resort. The best response to a breach is still to avoid being breached at all.&nbsp;<\/p>\n\n\n\n<p>At the end of the day, if your business never has to make a cybersecurity claim, it\u2019ll be a win for your insurer \u2013 but it\u2019ll be a win for you and your clients and customers, too.&nbsp;<\/p>\n\n\n\n<p><em>With its unique three-key encryption technology,&nbsp; Cryptoloc is the world\u2019s safest cybersecurity platform. To show you take data management seriously, visit&nbsp;<\/em><a href=\"https:\/\/127.0.0.1\/\"><em>cryptoloc.com<\/em><\/a><em>.&nbsp;<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>It may not have attracted as much attention as the coronavirus, but ransomware has become a pandemic unto itself \u2013 and it\u2019s sending the price of cyber insurance skyrocketing. Here\u2019s what you can do to keep your premiums as low as possible.&nbsp;&nbsp;&nbsp; Cyber insurance is a relatively new addition to the insurance market that helps [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1100,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/posts\/876"}],"collection":[{"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/comments?post=876"}],"version-history":[{"count":1,"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/posts\/876\/revisions"}],"predecessor-version":[{"id":877,"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/posts\/876\/revisions\/877"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/media\/1100"}],"wp:attachment":[{"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/media?parent=876"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/categories?post=876"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/127.0.0.1\/wp-json\/wp\/v2\/tags?post=876"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}