There probably isn’t a person out there who hasn’t heard of the recent Marriott Hotel chain data breach in late 2018. When you consider that nearly 500 million guests were potentially affected by this breach, it’s clear why this has become a major news story around the globe since Marriott spokespeople went public about the breach. According to a recent Ponemon IBM study, the cost of 50 million records could be $350 million, so when you consider that the Marriott breach is ten times bigger, it’s possible that the Marriott could see expenses totaling $3.5 billion over the next several years.
Hotel spokespeople have stated that, while they do have cyber/privacy liability insurance that is designed to protect them against losses that are related to cyber risks, there’s a good possibility that their coverage might not be sufficient to cover all the losses or claims that could arise in connection with this attack.
- Cyber insurance is worth it
- It’s vitally important to pick the right cyber insurance for your needs!
This blog will help you understand why cybersecurity insurance is so important, and what to think about when purchasing cyber insurance for your organization.
Why Do I Need Cyber Insurance?
There is no doubt that we’re living in turbulent times. According to the 2018 CyberArk Global Advanced Threat Landscape Report, 56% of the 1,300 IT Security decision-makers surveyed indicated that targeted phishing attacks were the top security threat that they faced. And long-gone are the days where you’d receive a poorly-written email from someone begging for your help in exchange for large sums of money. These new phishing attacks are state-of-the-art, more convincing, and far more devious than ever before. Whether it’s mimicking banks, utilities, or even the Canadian Revenue Agency, the threats are getting more and more sophisticated, and even the most tech-savvy can be lured into clicking on malicious links.
And when threat actors do get through, it’s not pretty. In fact, the Ponemon Institute’s 2018 Cost of a Data Breach Study estimates that the average total cost of a data breach is $3.86 million (an increase of 6.4% from last year), although that number does go up, depending on how many records are affected by the breach.
According to our experts, anybody who holds onto sensitive or personally-identifiable information needs to have cyber insurance. When you look at these statistics above, isn’t it clear why having cybersecurity insurance is a good idea?
Cyber Insurance is Only Half the Equation
Making sure that you have the right cybersecurity insurance isn’t the only thing you can do to protect yourself from the threat actors who are just itching to worm their way into your data. Building a strong corporate culture that includes leading security practices, you need to consider several important points:
- Where your data is being stored
- Who has access to your data
- How your data is being accessed
It’s clear that ensuring you have the right cyber insurance is only half the equation. You should also have a plan in place to monitor and respond to cybersecurity threats. For instance, are you running annual security checks on your IT environment to flag any potential risks? Do your employees know what to do in the event of a security breach? The faster you can respond to a cyber attack, the better your chances at reducing your overall costs.
ProServeIT’s Executive Cybersecurity Workshop can help you understand the top cybersecurity concerns that your organization may face, the risks you should be aware of, and how you can improve your organization’s security habits and behaviours.
