Rethinking Your Cyber Insurance Needs as Your Workplace Evolves

Rethinking Your Cyber Insurance Needs as Your Workplace Evolves

S. Wilson "Will" Quick

S. Wilson "Will" Quick

February 28, 2022 09:39 AM

The past 20 months have created a lot of transitions in how people work. Some companies still have the majority of their employees working remotely and intend to keep it that way permanently. Other businesses have tried to come back fully in-person only to send workers home again as new variants emerge and COVID cases begin to rise again.

We have seen an increase in cybersecurity incidents with such a dispersed workforce. Changes in working conditions, home systems that are less secure, and the general stress we are all under as the pandemic drags on have all likely contributed.

A survey released by Deloitte in October found that 98% of C-suite executives had come across at least one cybersecurity incident in the past year and 86% of U.S. executives had noticed an increase in attempts. However, the same survey found that 14% of executives said their company had no plans in place to either defend against an attack or respond to an incident.

One key piece of that incident response should be cyber insurance. Depending on the specific policy, “cyber insurance” can cover the cost of business disruption, lost revenue, equipment damages, attorney fees, forensic analysis and the expenditures associated with legally required notifications of the data breach. As with other types of insurance, thinking through your risks and knowing what type of cyber insurance coverage will be the most helpful should be an important part of your yearly planning.

A report issued in May by the U.S. Government Accountability Office (GAO) found that only 47% of businesses had cyber insurance in 2020. This is a significant gain from 2016, when the number was 26%, but it surprises me to read that a majority of businesses still do not have a financial safety net to help cover the costs of ransomware and other cyberattacks when those incidents make headlines month after month. I have to believe owners at those businesses believe that “it can’t happen to us,” but they would be wrong. I handle security incidents for clients of all sizes and types and across industries ranging from food processing and manufacturing to transportation companies to financial institutions.

As people continue to work remotely, those businesses without cyber insurance need to look into it and those with cyber insurance need to check their policies to make sure they meet the needs of the current workforce and working conditions. For example, I recently dealt with a situation where, when a company transitioned to remote working, it did not have enough devices to send each employee home with a computer, so it equipped the personal computers of some individuals with the software they needed for work. One of those personal computers was then hacked, opening the entire company system up to a data breach. However, the cyber insurance policy only covered devices owned by the company and so the business was forced to pay for the entire cost of the response, including my services. Look for important exclusions like that when reviewing your policies.

When reviewing cyber insurance policies, it’s important that a company’s IT department is involved in the process to make sure the policy captures all of the likely risks and exposure a company faces, as well as reflects the current working situation. A review by an attorney may also help identify possible red flags or exposures that are not covered by an insurance policy.

The GAO study cited above found that the increase in cyberattacks led to an increase in insurance costs, with premiums rising as much as 30% for some companies in 2020, at a time when insurers were also reducing coverage limits for some of the most at-risk industries, such as education and health care.

Many companies also think that one cyber insurance policy will cover all of their potential exposure. However, we are seeing an emerging trend of insurance companies issuing specific policies or riders for each possible risk and pricing those based on a particular businesses likely exposure. To help determine the appropriate pricing, or even if they will issue a policy at all, many cyber insurance companies are also requiring an audit of a company’s computer systems, data policies and other protections before issuing insurance – similar to how an individual might need a physical to get life insurance. Again, involving an attorney in this process can help determine your legal risks and exposures, as well as your technical ones.

Cyber attacks will likely continue to rise in 2022, but with proper precautions, companies can limit their financial and legal exposure and ensure they are better prepared for whatever threats may develop.

Related Articles

Cybersecurity Awareness for Lawyers

by Jordan Donich

Law firms are at an even greater cybersecurity risk as they move more into the digital age of working from home. Here are some methods of attack and ways to reduce and prevent such attacks to your firm.

Cybersecurity Tips for Lawyers and Law Firms

Trending Articles

What the Courts Say About Recording in the Classroom

by Christina Henagen Peer and Peter Zawadski

Students and parents are increasingly asking to use audio devices to record what's being said in the classroom. But is it legal? A recent ruling offer gives the answer to a question confusing parents and administrators alike.

Is It Legal for Students to Record Teachers?

Choosing a Title Company: What a Seller Should Expect

by Roy D. Oppenheim

When it comes to choosing a title company, how much power exactly does a seller have?

Choosing the Title Company As Seller

Caffeine Overload and DUI Tests

by Daniel Taylor

While it might come as a surprise, the over-consumption of caffeine could trigger a false positive on a breathalyzer test.

Can Caffeine Cause You to Fail DUI Test?

Johnny Depp and Amber Heard: The Best Lawyers Honorees Behind the Litigation

by Gregory Sirico

Best Lawyers takes a look at the recognized legal talent representing Johnny Depp and Amber Heard in their ongoing defamation trial.

Lawyers for Johnny Depp and Amber Heard

Announcing The Best Lawyers in Australia™ 2023

by Best Lawyers

The results include an elite field of top lawyers and firms from Australia.

The Best Lawyers in Australia™ 2023

Wage and Overtime Laws for Truck Drivers

by Greg Mansell

For truck drivers nationwide, underpayment and overtime violations are just the beginning of a long list of problems. Below we explore the wages you are entitled to but may not be receiving.

Truck Driver Wage and Overtime Laws in the US

The Real Camille: An Interview with Johnny Depp’s Lawyer Camille Vasquez

by Rebecca Blackwell

Camille Vasquez, a young lawyer at Brown Rudnick, sat down with Best Lawyers CEO Phillip Greer to talk about her distinguished career, recently being named partner and what comes next for her.

Camille Vasquez in office

How to Navigate False Abuse Claims in a Child Custody Case

by Ashley Jones

There’s hope for families to recover—a good lawyer is key.

False Abuse Claims in Child Custody

An Army of Nancy

by Rachel Shrewsbury

The horrific stories out of Guantánamo Bay nearly caused me to lose faith in the American principles of liberty and justice. Nancy Hollander turned out to be the ray of hope I was looking for.

Q&A with Nancy Hollander

Announcing The Best Lawyers in The United Kingdom™ 2023

by Best Lawyers

The results include an elite field of top lawyers and firms from the United Kingdom.

The Best Lawyers in The United Kingdom 2023

Announcing The Best Lawyers in Japan™ 2023

by Best Lawyers

The results include an elite field of top lawyers and firms from Japan.

The Best Lawyers in Japan™ 2023

“Best Law Firms” Submissions: What They Are and Why They Matter

by Best Lawyers

"Best Law Firms" rankings are produced yearly by U.S. News & World Report and Best Lawyers. The submissions process is an important component for all eligible firms.

Best Law Firms Submissions

How Peer Review Powers Industry Referrals

by Best Lawyers

Best Lawyers combines the trust of industry referrals with state-of-the-art technology to help clients find the right lawyer.

Four people searching in their smartphone with the Best Lawyers methodology wheel over top

Announcing The Best Lawyers in France™ 2023

by Best Lawyers

The results include an elite field of top lawyers and firms from France.

Blue, white and red strips

When DNA Isn’t the Tie That Binds

by Brittney M. Miller and James J. Vedder

Determining biological parenthood is as easy as getting a DNA test. Determining legal parenthood is more complicated altogether—especially as the composition of the American family continues to evolve.

When DNA isn't the tie that binds

Aim High and Fly

by Khalil Abdullah

From a silent victim of hometown segregation to Air Force captain and lawyer of consummate skill, Karen Evans exemplifies leadership—and vows always to help those who seek to follow her path.

Karen Evans' Leadership in the Airforce