Cybersecurity insurance is a hot topic! As many as 84% of organisations have such insurance, but premiums are increasing and end users are required to jump through a growing number of hoops to gain and maintain coverage. Even then, not every incident is covered. We don\u2019t sell insurance at Sophos, but we can help clients reduce their premiums and access appropriate cover thanks to the great protection we offer.<\/p>\n
We can help customers to access cover. Advanced protection is increasingly a requirement in order\u00a0to get cyber\u00a0coverage, with managed\u00a0detection and response (MDR) services, endpoint or\u00a0extended detection and response (EDR\/\u00a0XDR) technologies and next-gen endpoint protection the most common requirements. Once cover is established, we can help to reduce premiums just as an alarm and window\u00a0locks reduce your\u00a0home insurance premiums, so having\u00a0advanced IT\u00a0defences helps reduce your clients\u2019 cyber\u00a0insurance costs.\u00a0While the insurers\u00a0exact premium calculation algorithms are a closely guarded secret, customers\u00a0consistently say that the quality of\u00a0their\u00a0protection impacts their\u00a0premium.<\/p>\n
Good cybersecurity makes sense in the long term too, because better protection reduces the likelihood of a claim. As with other forms of insurance, if you make a claim, you can expect a signi\ufb01cant increase in your premiums in subsequent years. By minimising your risk of being impacted by a cyber-attack, unauthorised access and exfiltration<\/strong>,\u00a0you\u00a0reduce the likelihood that you\u2019ll need to call on your\u00a0policy \u2013 and help keep your\u00a0premiums down. If the worst does happen, then an effective cyber security approach can at least reduce the impact of the incident. This will reduce the cost of the resultant claim by allowing a rapid and appropriate response to a cyber-attack. In particular, having an incident response plan in place and being able to call on experienced incident responders will help you minimise the fall-out from the attack.<\/strong> This is where our managed threat and rapid response services can come in to play.<\/p>\n Finally, and potentially most significant of all, good cyber security can help to reduce the risk of non-payment of a claim. Many policies specifically exclude particular types of attack, like ransomware, and you should encourage your customers to carefully peruse policy documentation to ensure the cover meets their needs. It is also worth looking at the conditions of pay out, as poor\u00a0IT hygiene can prevent your clients from receiving \ufb01nancial support in the event of\u00a0an incident. If\u00a0the\u00a0insurer\u00a0believes that a door has been left open through weak\u00a0practices, they may have grounds not to pay out on a claim. XDR is an ideal tool to assess an end user estate rapidly for out-of-date systems and applications that require updates.<\/p>\n Protection and insurance certainly aren\u2019t mutually exclusive and the rush to access cover this is the ideal opportunity to position yourselves as trusted advisors and review a client\u2019s protection strategy with a view to upselling.<\/p>\n