Many businesses devote their cyber security dollars to technologies designed to prevent attacks, such as firewalls, virtual private networks and anti-malware applications.
However, an October 2023 report indicates that they might do better to focus both on prevention and detection. Enhanced emphasis on detection could make cyber attacks less severe, resulting in smaller cyber insurance claims and possibly lower future premiums.
The report from Allianz Commercial found that a tiny fraction of all cyber attacks — 2% — account for the overall amount of cyber insurance losses. Organizations quickly contain 90% or more of other attacks. The dollar loss from most of them is less than the policy deductible; many of these losses are never reported to the insurance carrier.
Cyber-attack losses are either detected and contained quickly with small dollar losses, or they become full-blown expensive crises. Few fall between these extremes. Detecting an attack in its early stages is the important factor in limiting the damage it causes.
Prevention is important but not foolproof. Limiting the damage and cost of those attacks that do get through is just as important. If hackers are able to encrypt or steal a company’s data, the costs of recovery and downtime skyrocket.
The report’s authors found that attacks not caught in the early stages can be more than 1,000 times more expensive than those nipped in the bud. An attack that would cost $10,000 if caught early can end up costing $10 million or more otherwise.
Despite that, the report found that two-thirds of cyber security budgets are spent on prevention. Early detection systems are plentiful, effective and constantly improving, but they get a smaller share of organizations’ spending. As a result, only one-third of companies detect security incidents through their own information technology staff.
What to do
To improve cyber security, employers should consider these steps:
- Regularly assess the organization’s cyber security risks. Identify potential threats, evaluate how serious they are, and prioritize them to determine which to address first. Perform assessments annually or as the organization’s operations and technology change. For example, if a business offers new product lines, a new assessment should be done.
- Devote more resources — equipment, software, and personnel — to incident detection.
- Implement policies and procedures for storing data, routinely encrypting sensitive stored information, and securely deleting it when no longer needed.
- Adopt a written incident response plan designed to enable early detection and mitigation of cyber incidents. It should describe the tasks each person involved in the response will perform.
- If the organization is too small to have a dedicated cyber security staff, work with a qualified IT security firm to respond to attacks.
Cyber insurance should be part of every organization’s risk management program. Many insurers, in addition to paying recovery costs and business interruption losses, offer forensic specialists to determine how an attack occurred. Ask us about a cyber insurance policy appropriate for your operations.
Even the best defensive line will occasionally give up a big play. Early detection of cyber attacks will help your business minimize the resulting damage.
BGES Group, located in Larchmont, N.Y. are New York Construction Insurance Specialists that represent 50+ companies and all the BEST general & umbrella liability programs! We offer every coverage you need including property, builders risk, inland marine, general liability, umbrella liability, auto, bid & performance bonds, workers’ compensation, N.Y.S. disability and group health. We are extremely responsive, responsible, trustworthy, fast, minimize your insurance headaches, we don’t charge ridiculous policy or service fees and when you call, text or email, whatever time of day, even weekends, we are ARE THERE to help YOU!
BGES Group are Workers’ Compensation Insurance Specialists for Tri-State Business Owners: Unhappy with your rates, company, being cancelled, losses causing difficulty getting coverage, in the middle of an audit dispute, payrolls misclassified, whatever your issue, we can help! We have special programs for: Auto Service, Contractors (especially New York), Limousine Services, Logistic Companies, Manufacturers, Recyclers, Truckers, we can help ANY tri-state business owner. We are considered “Preferred Agents” for this one program that if we can get you in, their pricing is excellent, offers long-term coverage stability and can cover multi-state operations. Program takes the hassle out of doing annual audits too.
If you would like to speak with us call Gary Wallach at 914-806-5853 or click here to email or click here to visit our website.
Company: BGES Group, 216A Larchmont Acres West, Larchmont, NY 10538
e-mail: bgesgroup@gmail.com
website: http://www.bgesgroup.com
© – Copyright – 2023 – BGES Group