The Expert Podcast

…So cyber liability insurance is a very interesting type of risk coverage It's a little bit different than other insurances So we'll take a look at what the current market is how it's changing almost week to week and what the history is. Cyber liability insurance I was first launched in the 1990s. Originally was to cover the.com companies. And those companies were very, vulnerable to things like destruction of data, hacking people getting in and, changing code. And even computer viruses. But what happened is in the early two thousands some states like California. Pass some laws that required that if a company's customer data was breached they had to notify the customer So let's say if you're…a major bank and somebody hacks. your system and downloads all your customer's information Name address phone number social security number driver's license. Now you have to notify all those consumers and you may have some liability You may have some costs to give them credit protection or to pay fees. Since that happened in their early two thousands now cyber liability insurance and morphed. Into something that was data protection and…coverage for those losses. This is the biggest priority for cyber liability insurance Now even 20 years later. And there are some. There have been more data protection laws, but now you also have ransomware where hackers know that these laws are in place and they'll hack your system. They'll get your customer data And they'll tell you if you don't pay us a ransom we'll release it or we'll delete it from your system…Cyber insurance is. from other types of insurance like fire insurance or slip and fall insurance or GL general liability insurance, because it hasn't been around as long. Fire insurance has been around for a hundred years General liability insurance has been around for decades. But cyber liability insurance has only been around for maybe 20 30 years depending on how you…calculate it. And there's a lack of historical data. So predicting the cost of the losses is difficult for insurance companies. So therefore coming up with the rates is also difficult making it more challenging is even if you knew exactly what the losses were for the last two years it changes. This year and next year we'll have different types of losses because hackers and cyber protection is morphing every year into different types of risk and losses. As an example. Exfiltration of data is now. Becoming more popular. than just hacking and ransomware. Even as recently as three years ago in 2019. Cyber insurance had to scramble quickly to cover. The reality of ransomware attacks. This was a variation of version of malware that was different than just scrambling systems. it used to be that, you know, black hat hackers would go in and lock down a system or erase system just for fun. Now they lock out people. From their company's records until they pay a ransom. And usually they get the ransom and some type of digital currency. So that way they're not trackable as a hacker. What this did was it raised the rates for cyber liability? insurance at first because it was happening, but as smart cyber companies, Realize that they can. mitigate these risks by requiring their insureds to have certain types of protections. They put that into their underwriting. So if you're applying for a cyber policy, they're going to ask you what are your policies for cyber defense? Do you have two factor authentication Do you have a proper password management? And firewalls within your data. If you have that you may be able to get more reasonable coverage and more reasonable premiums. In reality the insurance companies they don't want. Claims any more than you do. So they're going to help you as an insured. Reduce the frequency and severity of cyber attacks. They're going to do that by sharing the data from other insureds. To help you put policies in place in your company to keep you from having a claim in the first place. Two factor authentication is one of those things Another one is called endpoint detection or EDR. And this is a tool that will detect and block malware before it gets into a network And it's a way of matching and verifying data coming into your network Also with exfiltration there's monitoring of large volumes of data coming. offloaded from your system. The fact that these insurance companies have seen even 10 or 15 years, they have this loss data and they can use this. To help prevent future losses where you as a company men never have seen a cyber loss. The insurance company knows what's out there and they can help you prevent it. And by putting those policies in place, you can prevent a loss in the first place and maybe even get better rates. The other thing to look at is the, the losses are coming Not necessarily from accidents If you have a fire in your building God forbid or you have some. type of damage or you have a, a liability where consumer sues you. Those are usually not accidents. Those are those are usually accidents. The problem with hacking is. Hackers are doing this on purpose They have monetized cyber crime. And it makes them a lot of money. And they're innovative They change to adapt to. Prevention and defense against the threats. A good insurance company will help you see that. And put things in place and maybe even quarterly or semi annually tell you about the new preventative measures you can put in place and sometimes even require them as a. Prerequisite of keeping coverage. The bottom line is that cyber losses and cyber risk are not going away. everything is going more digital. And the digital economy is expanding. So there's going to be more vulnerabilities not less. But there'll also be more technologies to defend against it as the cyber defense and cyber insurance markets start to come together and help companies prevent from having a loss because look. Your worst day is going to be when you have a loss even if you have insurance for it, you're still going to be faced with a very challenging. workflow for that day week month even for several months, the fact that there's $10 billion in premiums for cyber insurance written in the last 24 months the last 12 months is a big deal They're estimating that not too long in the future There might be $50 billion in premiums written within the decade. So if you have questions about cyber insurance, you can check out our website. Now we're glad to be of assistance to remember. get with a good insurance agent or broker in your area that covers your business. to get good coverage that matches exactly what you want.