The Expert Podcast

…We see cyber attacks happening every day in our insurance and investigative industries. And here's an article in the wall street journal which. Describes this even more This is, displaying where small businesses are now seeing an uptick. In cyber attacks and the reason why is because a lot of hackers are seeing it as a soft target many small businesses Don't have the budgets…to put in place a lot of security prevention. So what happens ? They become…bigger targets because they don't believe their targets So they don't make security priority According to the article. And cyber attacks are becoming more common for these businesses. They're not prepared for it. And the hackers know it So there. they look at it like an easy target and they're also more willing to pay. Even smaller amounts very quickly. How much more so well, small businesses were attacked at twice The rate of larger organizations. This is from cyber expert at MasterCard. Data breaches that small businesses jumped 152%. Compared to the prior two years. Many small businesses are more focused on keeping their heads above water. With pandemic and finding help and supply chain and inflation. So they're not going to focus a lot of attention on cybersecurity Here's the key. Businesses are aware of the threat but don't realize they aren't insured against it. Many small businesses incorrectly still expect to be covered under their property and liability policies where there's exclusions for this. So make sure you get with your insurance broker your agent. or look into cyber protection Usually a standalone policy is what you're going to end up having the side effect of that is if you sign up for cyber insurance for some from some company, they're also going to give you a lot of free resources to prevent an attack in the first place. Because even if you have insurance you don't want to have an attack. It's kind of like if you have fire insurance that doesn't mean you want your building to burn down It's still going to be a hassle If you have an attack so you want to avoid it. According to the insurance industry, commercial business insurance tends to exclude items like legal fees for an attack costs of repairing infrastructure and other expenses from a cyber event…So what happens if you have insurance…This…alternative and my metals. There are aluminum manufacturing company in Florida had cyber insurance that covered a ransomware attack. The insurance company dispatch experts quickly determine the eggs The act tackers had not compromised sensitive information. Aware that nothing had been compromised. The company owner was able to rely on the backup. And rejected the attackers ransom demand of $2.4 million a Bitcoin. The insurance company did pay. A claim of 180,000 to pay attorney's fees. hard drive replacement forensics experts and the cost of new software. Let's review the other one again just in case you know we're it's worth repeating…Company in Maine. Had $250,000 stolen from it. It cost them two 18 their insurance company that was not a cyber company paid a little bit. But they lost a few years of our lives $200,000 and a whole lot of aggravation. What about the market Is it available Well, cyber insurance is a good thing to have but it's becoming more difficult to obtain. Pricing for the policies has gone up 10 or 15% annually. However many. Renewed policies don't have the same increase as if you just buy a new policy. The reason why is. If you have an existing policy you're known to be a certain type of risk You're known to have certain procedures And we'll talk about that. More small businesses on a percentage basis are being turned down due to tightening underwriting requirements What are those requirements. Companies may now be required to have multi-factor authentication. As well as vendors and third parties to make sure that they're safe. multifactor authentication reduces the risk. Insurers may also require small businesses to encrypt backup data. And have a response plan Well here's the thing. If you put all that in place first and then apply for insurance, you're more likely to get a good policy from a good company. At a lower price What kind of companies do you want to look for ? Small businesses may be able to skip some underwriting requirements by purchasing a policy from a technology company that sells insurance rather than an insurance company. That sells cyber. What does that call That's called an InsureTech. They automate underwriting by using artificial intelligence which pings your computers pings all your servers to see what your risk is. And they know how to write the policy accordingly. But you're probably going to be required to regularly improve your cybersecurity as a condition for maintaining coverage. That's going to help you, but it's also a burden. If you get a policy from an InsureTech you're going to be required to constantly be reviewing your cyber security policies, because if you don't. The risk goes up for a cyber attack which means your insurance Company's more on the hook. This is an excellent review of what's going on with cyber insurance. You don't want to be like this person here who lost $200,000 for many small businesses $200,000 could be make or break. So you want to have the right kind of policy Well how much did they cost ? We quote policies all the time for small and medium-sized companies that you know are a hundred something dollars a month are not that big a deal, but you have to make sure that you abide by the guidelines of your insurer to make sure you're using best practices for your cyber protection.