80% of companies have had to use their cyber insurance

Results of recent Delinea survey show cyber insurance is increasingly required by Boards and Management Teams, though often not covering what is needed.

Delinea, a provider of Privileged Access Management (PAM) solutions, today published a new report showing that cyber insurance not only has become ubiquitous, but more than half of companies that have leveraged their coverage have used it more than once. As a result, insurers are pulling back on covering what is most needed, with only about 30% of organisations saying their policy covers critical risks including ransomware, ransom negotiation, and decision on ransom payment.

The survey, conducted among 300 US-based IT decision makers by Censuswide, found that nearly 70% of organisations have applied for cyber insurance, with 93% being approved when they applied, and 65% claiming the process took less than three months. While risk reduction is the main reason for applying (40%), one-third (33%) of respondents claimed that it was also due to requirements from executive management and Boards of Directors, and 25% cited recent ransomware incidents as a primary decision driver. Given the pressure coming from the top, it’s therefore no surprise that 93% received the budget required to purchase their cyber insurance policies even as 75% of respondents said premiums increased in their last renewal.

“Executives and Boards use cyber insurance to lower the costs associated with potential breaches. As a result, most organizations are scrambling to buy or renew a policy, even as the insurers pull back on what they will cover and simultaneously raise the price of coverage,” said Art Gilliland, CEO of Delinea. “Our report shows that insurers are increasingly requiring organisations to implement a broader set of security controls to try to reduce the number of customers leveraging their policies. With 80% of companies leveraging their insurance policies, it is expected that more advanced solutions are needed.”

Other main reasons cited for applying for cyber insurance were business contract requirements (24%) and recent data breaches (17%). The largest number of respondents (48%) indicated that their policy covers data recovery, while roughly a third indicated it covers incident response, regulatory fines, and third-party damages.

To qualify for cyber insurance, a majority of respondents (51%) confirmed that cybersecurity awareness training was a requirement, with just under half (47%) stating they were required to have malware protection, antivirus software, multi-factor authentication (MFA), and backup data. When asked how they met insurers’ Privileged Access Management requirements, a similar percentage said they had suitable existing solutions (43%) as those who had to acquire additional solutions (42%).

 

Share

Featured Articles

ICYMI: New Age of the CISO and cybersecurity trends for 2023

A week is a long time in cybersecurity, so here’s a round-up of the Cyber Magazine articles that have been starting conversations around the world

Kingfisher chooses Google Cloud as catalyst for growth

Google Cloud will support Kingfisher's digital ambitions with a range of solutions, from infrastructure to data analytics.

ICYMI: Cyber predictions for 2023 and trouble in paradise

A week is a long time in cybersecurity, so here’s a round-up of the Cyber Magazine articles that have been starting conversations around the world

Osirium shares its cyber predictions for 2023

Cyber Security

ICYMI: Unloved emails and cybersecurity worth $500bn by 2030

Cyber Security

Cyber security market anticipated to reach $500bn by 2030

Cyber Security