INFORMATION SECURITY CYBER LIABILITY RISK MANAGEMENT: October Sponsored by:
|
|
- Owen Booth
- 7 years ago
- Views:
Transcription
1 October 2012 & INFORMATION SECURITY CYBER LIABILITY RISK MANAGEMENT: Sponsored by:
2 Information Security Cyber Liability : The Second Annual Survey on the Current State of and Trends in Information Security and Cyber Liability Executive Summary & As awareness grows due to media coverage of high profile data breaches, pending cyber legislation and continued advisories from cyber security professionals, information security and other cyber risks continue to represent at least a moderate threat to a majority of risk professionals. Board Members and Executive Management increasingly are recognizing the risks of Board Members and Executive Management increasingly are recognizing the risks of a wide range of exposures such as lost or stolen data, violation of privacy laws, intellectual property infringement, social media, mobile devices, BYOD (Bring Your Own Device) and cloud computing. a wide range of exposures such as lost or stolen data, violation of privacy laws, intellectual property infringement, social media, mobile devices, BYOD (Bring Your Own Device) and cloud computing. Although the strategies for addressing these risks vary, more and more organizations are adopting an enterprise-wide or at least a multi departmental approach to information security and risk management. Insurance also is increasingly becoming a part of more organizations cyber risk management strategy. About The Survey and the Respondents For the second consecutive year Advisen Ltd has administered a survey sponsored by Zurich to gain insight into the current state of and ongoing trends in information security and cyber liability risk management. The survey was conducted for three weeks, beginning September 10, 2012 and ending October 1, Invitations to participate were distributed by to 8,248 risk managers, insurance buyers and other risk professionals. The survey was completed at least in part by 511 respondents, for a response rate of 6 percent. The largest percentage of respondents (49.0 percent) classified themselves as members of risk management departments (not head), followed closely by Chief Risk Manager/Head of Department at 48.0 percent. Respondents with more than 20 years of risk management and insurance experience represented the largest group at 44.4 percent of the 2 October 2012 Advisen Ltd. Sponsored by:
3 The vast majority of respondents (86.7 percent) believe that cyber and information security risks pose at least a moderate threat to their organization. total, followed by 28.0 percent with between years, 16.2 percent between 6-10 years and 10.6 with 5 years or less. Businesses from an array of industries are represented. Segmented by 13 macro segments, Government and Nonprofit accounts for the largest industry sector with 15.3 percent of the total respondents, followed by Healthcare at 13.0 percent, Industrials at 12.4 percent, Consumer Discretionary at 8.8 percent, Professional Services at 8.6 percent, Utilities at 6.9 percent, Consumer Staples at 6.5 percent, Nonbank Financial at 5.9 percent, Banks at 5.5 percent, Education at 5.3 percent, Materials at 4.5 percent and Energy and Telecommunications both at 3.7 percent respectively. The survey also has a wide representation of companies based on size but is slighted weighted towards larger companies with 61.3 percent of respondent companies having revenues in excess of $1 billion. Perception of Cyber Risks The vast majority of respondents (86.7 percent) believe that cyber and information security risks pose at least a moderate threat to their organization. This is nearly identical to the 2011 response at 86.0 percent. However, while the perception of risk is basically unchanged for risk management and insurance professionals, it is noticeably higher for Board Members and C-Suite Executives. In response to the question In your experience, are cyber risks viewed as a significant threat to your organization by: 52.2 percent said yes for Board of Directors and 65.1 percent said yes for C-Suite Executives. Compared with the 2011 survey, this is an increase of 7.1 points for both the Board of Directors and C-Suite Executives. (Exhibit 1) EXHIBIT 1 In your experience, are cyber risks viewed as a signifcant threat to your organizaton by: Board of Directors C-Suite Executives Suppliers/Customers Yes No Don't Know N/A 3 October 2012 Advisen Ltd. Sponsored by:
4 On a scale of one to five, with 5 as very high risk and 1 as very low risk, privacy violation/data breach of customer records was the biggest concern of respondents, with 63.6 giving it a rating of 4 or 5. In 2012, much has been discussed regarding the increase in cyber-crimes targeting small and mid-size businesses. In response to the question How would you rate the potential dangers posed to your organization by cyber & information security risks? the smallest companies (revenues less than $250 million) still viewed cyber risks less seriously than their largest counterparts (revenue greater than $10 billion), with 81.8 percent of smaller companies saying the risks pose at least a moderate danger compared to 95.9 percent of large companies. The percent difference, however, is shrinking. In 2011, there was a 17.9 point difference between the percentage of the smallest and largest companies, while in 2012 there is only 14.1 point difference. On a scale of one to five, with 5 as very high risk and 1 as very low risk, privacy violation/ data breach of customer records was the biggest concern of respondents, with 63.6 giving it a rating of 4 or 5. This was followed closely by damage to your organizations reputation resulting from a data breach with 62.7 percent and damage to your organizations reputation via social media with 52.1 percent. In contrast, the exposures that were perceived as representing the lowest risks, and had the highest percentage of respondents providing a rating of a 1 or 2, included infringing on others intellectual property with 45.7 percent, business interruption due to supplier cyber disruptions with 37.8 percent and business interruption due to customer cyber disruptions at 36.8 percent. (Exhibit 2) EXHIBIT 2 From the perspective of your organization, please rank the following on a scale of 1 to 5, with 5 as a very high risk and 1 as a very low risk (Very High Risk) (Very Low Risk) Privacy violation/data Infringing others intellectual property Theft/loss of your organization s Denial of service attack or virus on Damage to your organizations Employment practices risk due Business interruption due to customer Business interruption due to supplier Business interruption due to cyber attack Damage to your organizations Incurring Costs and expenses from a 4 October 2012 Advisen Ltd. Sponsored by:
5 More organizations are beginning to believe that it is the responsibility of the entire organization to mitigate risks. Disaster Response Research has shown that organizations with a comprehensive disaster response plan in place before a breach occurs fare much better after a major breach than those that do not. According to the results of this survey, it appears that this message is indeed being received. Of the total respondents, 80.4 percent said that they have a disaster response plan in place. This represents a 12.4 point increase from In response to the question In the event of a data breach, which department in your organization is PRIMARILY responsible for assuring compliance with all applicable federal, state or local privacy laws including state breach notification laws? consistent with the 2011 survey, the most respondents answered IT at 38.0 percent followed by General Counsel at 21.6 percent. (Exhibit 3) EXHIBIT 3 In the event of a data breach, which department in your organization is PRIMARILY responsible for assuring compliance with all applicable federal, state, or local privacy laws including state breach notification laws? 0% 1% 3% 0% 6% 11% 12% 7% 22% 38% Sales Customer service Information Technology (IT) General Counsel /Insurance Compliance Chief Privacy Officer Don t know None Other (please specify) 5 October 2012 Advisen Ltd. Sponsored by:
6 Cloud computing is becoming a popular alternative for business seeking to take advantage of its cost effectiveness and increased storage capacity. Information Security and Cyber Focus In response to the question are information security risks a specific risk management focus within your organization? 72.5 percent responded yes, 22.9 percent responded no. This was consistent with the 2011 survey where respondents were asked the same question and 71.6 percent said yes and 25.2 said no. Additionally, information security is a risk management focus of 71.0 percent of organizations with revenues less than $1 billion and 74 percent with revenue greater than $1 billion. However, for the organizations with revenues in excess of $10 billion it is a risk management focus for 83.8 percent. More organizations are beginning to believe that it is the responsibility of the entire organization to mitigate risks. When asked Does your organization have a multi-departmental information security risk management team or committee? 61.4 percent said yes compared to 57.2 percent who said yes in The department or functions that are most likely to have representation in the information security risk management team are IT with 91.3 percent, /Insurance 79.1 percent, General Counsel 65.3, Internal Audit 55 percent, Compliance 45.4 percent, Treasury or CFO 33.2 percent, Chief Privacy Officer 33.2 percent, Other 13.8 percent, Marketing 10.7 percent, Investor Relations 8.7 percent, Sales 5.6 percent. 7.1 percent did not know. (Exhibit 4) EXHIBIT 4 Which departments are represented on your cyber risk management team or committee? 100% 90% 80% 70% 60% 50% 40% 30% 20% 10% 0% Information Technology (IT) General Counsel s office Treasury or CFO s Office (other than risk Internal Audit Marketing Sales Investor Relations /Insurance Chief Privacy Officer Compliance Don t know Other (please specify) 6 October 2012 Advisen Ltd. Sponsored by:
7 Although information security and cyber risks were widely acknowledged as serious concerns, cyber liability insurance is still purchased by less than half of the organizations. While the IT department is still acknowledged as the front line defense against information losses and other risks, the survey shows that a slow trend may be occurring and that responsibility is being shifted to the /Insurance department. In response to the question Which department is PRIMARILY responsible for spearheading the information security risk management effort? 65.5 percent said it was the responsibility of the IT department compared to 73.2 percent in 2011, followed by 15.1 percent who said it was the /Insurance department s responsibility compared to 13.2 percent in (Exhibit 5) EXHIBIT 5 Which department is PRIMARILY responsible for spearheading the information security risk management effort? 2% 0% 7% 15% 2% 0% 4% 5% Information Technology (IT) General Counsel s office Treasury or CFO s office Internal Audit /Insurance Human Resources (HR) 65% Chief Privacy Officer Don't Know Other (please specify) Social media increasingly is being recognized as an exposure that requires risk management attention. As noted above, more than half of the respondents consider reputational damage via social media a significant threat to their organization. Of the companies surveyed, 78.7 percent have a written social media policy, a 15.1 point increase over Mobile Devices and Cloud Computing Included in this year s survey were questions on two of the biggest information security and topics of 2012, mobile devices and cloud computing. Respondents were asked Does your organization have a mobile device security policy? 74.8 percent said yes, 14.6 percent said no and 10.6 percent did not know. Larger companies (those in excess of $1 Billion in revenue) are more likely to have a mobile device security policy with 84.9 percent responding yes, compared to only 61.8 percent of the smaller companies (those less than $1 Billion in revenue). 7 October 2012 Advisen Ltd. Sponsored by:
8 Respondents claiming to have a comprehensive crisis response plan in place shot up materially from about two thirds in 2011 to four out of five respondents in Businesses also are increasingly allowing their employees to use their personal mobile device for business purposes. As a result, these devices are now capable of accessing proprietary company information and creating a significantly more difficult exposure to control. When asked Does your organization have a bring your own device (BYOD) policy? 36.2 percent responded yes, 39.6 percent responded no, and 24.2 percent did not know. A more granular analysis of this question shows that large companies are more likely to have a BYOD policy with 45.0 percent of large companies responding yes compared to only 27.4 percent of smaller companies. Cloud computing is becoming a popular alternative for business seeking to take advantage of its cost effectiveness and increased storage capacity. However, the idea of warehousing propriety business information on a third-party server has led many to question and/or trust its security. Respondents were asked Does your organization use cloud computing services? 44.7 percent said yes, 33.9 percent said no, and 21.4 percent did not know. Respondents were also asked Is cloud computing part of your data security risk management process? 38.7 percent said yes, 19.2 percent said no, and 27.6 did not know. The Role of Insurance in Information Security and Cyber Although information security and cyber risks were widely acknowledged as serious concerns, insurance is still purchased by less than half of the organizations. This percentage, however, is trending upward. Survey participants were asked Does your company purchase insurance? 43.9 percent of respondents said yes compared to only 35.1 percent in 2011, and 49.9 percent said no compared to 60.1 percent in Brand restoration coverage is currently being purchased by 17.5 percent of the companies surveyed. Of those who purchase coverage, 37.5 percent said that they have purchased coverage for less than two years, 42.2 percent said between three and five years and 20.3 percent said over 5 years. This suggest that the number of organizations that recognize the role that insurance can play as part of an information security and cyber risk management program continues to increase. The percentage of companies considering purchasing insurance in the next year remained consistent with Companies that currently do not purchase insurance were asked Are you considering buying this coverage in the next year? 25.1 percent said yes, 48.7 percent said no and 26.2 percent do not know. These percentages continue to indicate that this coverage represents a growth opportunity for brokers and insurers. 8 October 2012 Advisen Ltd. Sponsored by:
9 Although the vulnerabilities of small and mid-size business has received increased media attention in 2012, larger organizations continue to be more concerned with the risk as opposed to their smaller counterparts, and as a whole continue to be more involved in enterprise-wide risk management. Analysis and Conclusions Two data points the 2011 survey and the 2012 survey provide an indication of how attitudes and practices are changing. Subsequent surveys will provide much stronger readings on trends in this important area. Based on these preliminary indications, however, it is clear that risk managers regard data security, privacy and reputation risks as at least a moderate threat, and it appears that the seriousness of the threat is increasingly recognized by strategic decision makers. Although the vulnerabilities of small and mid-size business has received increased media attention in 2012, larger organizations continue to be more concerned with the risk as opposed to their smaller counterparts, and as a whole continue to be more involved in enterprise-wide risk management. While concerns about cyber-related risk varied somewhat by size of organization, this year s survey indicates overall greater attention to risk management and insurance issues. A higher percentage of respondents said their organizations have a multi-departmental team focused on data security and privacy as compared to last year. Respondents claiming to have a comprehensive crisis response plan in place shot up materially from about two thirds in 2011 to four out of five respondents in The percentage of organizations purchasing cyber-related insurance coverages also was significantly higher, with nearly 44 percent of participating organizations purchasing insurance in 2012 as compared to about 35 percent in Not surprisingly, IT departments continue to spearhead data security and privacy initiatives in most organizations. Risk managers, however, seemingly are playing increasingly significant roles in the process. The percentage of organizations where /Insurance led the data security risk management program increased slightly to about 15 percent, as compared to about 13 percent in In nearly 80 percent of organizations with multidepartmental data security and privacy teams, the /Insurance department is represented on the team. One apparent deficiency in the data security risk management process of many organizations has to do with data breach reporting requirements. Presently, 46 states have data breach reporting laws, with requirements that can vary materially from state to state. As was the case with the 2011 survey, the vast majority of respondents said the IT department has principal responsibility for fulfilling breach notification requirements. However, IT departments at most companies are seemingly ill-equipped for this responsibility. 9 October 2012 Advisen Ltd. Sponsored by:
10 Presently, 46 states have data breach reporting laws, with requirements that can vary materially from state to state. About Zurich Zurich in North America is a part of Zurich Insurance Company (Zurich), an insurance-based financial services provider with a global network of subsidiaries and offices in North America and Europe as well as in Asia Pacific, Latin America and other markets. Founded in 1872, the Group is headquartered in Zurich, Switzerland and employs approximately 60,000 people serving customers in more than 180 countries, including more than 9,500 employees in North America. Zurich entered the U.S. market in According to Highline Data LLC (NAIC 2008), Zurich in North America ( is the second-largest writer of commercial general liability insurance and the fourth-largest commercial property-casualty insurance company, serving the global corporate, large corporate, middle market, specialties and programs sectors. Zurich s risk engineering services in the United States are provided by Zurich Services Corporation. n 10 October 2012 Advisen Ltd. Sponsored by:
INFORMATION SECURITY CYBER LIABILITY RISK MANAGEMENT. October 2013. Sponsored by:
2013 INFORMATION SECURITY CYBER LIABILITY RISK MANAGEMENT & October 2013 & INFORMATION SECURITY CYBER LIABILITY RISK MANAGEMENT: The Third Annual Survey on the Current State of and Trends in Information
2014 NETWORK SECURITY & CYBER RISK MANAGEMENT: THE THIRD ANNUAL SURVEY OF ENTERPRISE-WIDE CYBER RISK MANAGEMENT PRACTICES IN EUROPE
2014 NETWORK SECURITY & CYBER RISK MANAGEMENT: THE THIRD ANNUAL SURVEY OF ENTERPRISE-WIDE CYBER RISK MANAGEMENT PRACTICES IN EUROPE February 2014 Sponsored by: 2014 Network Security & Cyber Risk Management:
2014 NETWORK SECURITY & CYBER RISK MANAGEMENT: A SURVEY OF ENTERPRISE-WIDE CYBER RISK MANAGEMENT PRACTICES IN THE ASIA-PACIFIC REGION
2014 NETWORK SECURITY & CYBER RISK MANAGEMENT: A SURVEY OF ENTERPRISE-WIDE CYBER RISK MANAGEMENT PRACTICES IN THE ASIA-PACIFIC REGION April 2014 Sponsored by: 2014 Network Security & Cyber Risk Management:
About the Survey Respondents
SPECIAL REPORT Information Security & Cyber Liability Risk Management The Second Annual Survey of Enterprise-wide Cyber Risk Management Practices in Europe February 2013 SPECIAL REPORT Information Security
2015 NETWORK SECURITY & CYBER RISK MANAGEMENT: THE FOURTH ANNUAL SURVEY OF ENTERPRISE-WIDE CYBER RISK MANAGEMENT PRACTICES IN EUROPE
2015 NETWORK SECURITY & CYBER RISK MANAGEMENT: THE FOURTH ANNUAL SURVEY OF ENTERPRISE-WIDE CYBER RISK MANAGEMENT PRACTICES IN EUROPE February 2015 2015 Network Security & Cyber Risk Management: The FOURTH
SOCIAL MEDIA MOBILE DEVICES CLOUD SERVICES INTERNET OF THINGS (IOT)
INFORMATION SECURITY AND CYBER LIABILITY RISK MANAGEMENT THE FIFTH ANNUAL SURVEY ON THE CURRENT STATE OF AND TRENDS IN INFORMATION SECURITY AND CYBER LIABILITY RISK MANAGEMENT Sponsored by October 2015
Cyber security: Are consumer companies up to the challenge?
Cyber security: Are consumer companies up to the challenge? 1 Cyber security: Are consumer companies up to the challenge? A survey of webcast participants kpmg.com 1 Cyber security: Are consumer companies
Exercising Your Enterprise Cyber Response Crisis Management Capabilities
Exercising Your Enterprise Cyber Response Crisis Management Capabilities Ray Abide, PricewaterhouseCoopers, LLP 2015 PricewaterhouseCoopers LLP, a Delaware limited liability partnership. All rights reserved.
THE ADVISEN CLAIMS SATISFACTION SURVEY FM GLOBAL RESULTS REPORT
THE ADVISEN CLAIMS SATISFACTION SURVEY FM GLOBAL RESULTS REPORT June 2015 This report, sponsored by FM Global, is an excerpt of a research report produced independently by Advisen. FM Global Results Report
CYBER LIABILITY INSURANCE MARKET TRENDS: SURVEY
CYBER LIABILITY INSURANCE MARKET TRENDS: SURVEY October 2015 CYBER LIABILITY INSURANCE MARKET TRENDS: SURVEY Global reinsurer PartnerRe has once again collaborated with Advisen to conduct a comprehensive
Protecting Your Assets: How To Safeguard Your Fund Against Cyber Security Attacks
Protecting Your Assets: How To Safeguard Your Fund Against Cyber Security Attacks Hacks, breaches, stolen data, trade secrets hijacked, privacy violated, ransom demands made; how can you protect your data
Managing Cyber Security as a Business Risk: Cyber Insurance in the Digital Age
Managing Cyber Security as a Business Risk: Cyber Insurance in the Digital Age Sponsored by Experian Data Breach Resolution Independently conducted by Ponemon Institute LLC Publication Date: August 2013
Demystifying Cyber Insurance. Jamie Monck-Mason & Andrew Hill. Introduction. What is cyber? Nomenclature
Demystifying Cyber Insurance Jamie Monck-Mason & Andrew Hill Introduction What is cyber? Nomenclature 1 What specific risks does cyber insurance cover? First party risks - losses arising from a data breach
Managing Cyber Risk through Insurance
Managing Cyber Risk through Insurance Eric Lowenstein Aon Risk Solutions This presentation has been prepared for the Actuaries Institute 2015 ASTIN and AFIR/ERM Colloquium. The Institute Council wishes
Cyber/ Network Security. FINEX Global
Cyber/ Network Security FINEX Global ABOUT US >> We are one of the largest insurance brokers in the world >> We have over 180 years of history and experience in insurance; we currently operate in over
Cyber Risks and Insurance Solutions Malaysia, November 2013
Cyber Risks and Insurance Solutions Malaysia, November 2013 Dynamic but vulnerable IT environment 2 Cyber risks are many and varied Malicious attacks Cyber theft/cyber fraud Cyber terrorism Cyber warfare
CYBER LIABILITY INSURANCE MARKET TRENDS: SURVEY. October 2014. Sponsored by:
CYBER LIABILITY INSURANCE MARKET TRENDS: SURVEY October 2014 CYBER LIABILITY INSURANCE MARKET TRENDS: SURVEY Global reinsurer PartnerRe collaborated with Advisen to conduct a comprehensive market survey
Cyber Security: The Growing Liability of Handheld & Mobile Devices
Cyber Security: The Growing Liability of Handheld & Mobile Devices 1 About Advisen: Advisen Ltd. is a privately-owned, independent and unbiased provider of news, data and risk analytics to the commercial
GALLAGHER CYBER LIABILITY PRACTICE. Tailored Solutions for Cyber Liability and Professional Liability
GALLAGHER CYBER LIABILITY PRACTICE Tailored Solutions for Cyber Liability and Professional Liability Are you exposed to cyber risk? Like nearly every other business, you have probably capitalized on the
Assessing enterprise readiness for the IoT Executive summary
A report from The Economist Intelligence Unit Assessing enterprise readiness for the IoT Executive summary Sponsored by Contents Executive summary 2 Investing in the IoT: reasons and plans 4 Business models
Rogers Insurance Client Presentation
Rogers Insurance Client Presentation Network Security and Privacy Breach Insurance Presented by Matthew Davies Director Professional, Media & Cyber Liability Chubb Insurance Company of Canada mdavies@chubb.com
CYBER & PRIVACY LIABILITY INSURANCE GUIDE
CYBER & PRIVACY LIABILITY INSURANCE GUIDE 01110000 01110010 011010010111011001100001 01100 01110000 01110010 011010010111011001100001 0110 Author Gamelah Palagonia, Founder CIPM, CIPT, CIPP/US, CIPP/G,
Is Your Company Ready for a Big Data Breach? Sponsored by Experian Data Breach Resolution
Is Your Company Ready for a Big Data Breach? Sponsored by Experian Data Breach Resolution Independently conducted by Ponemon Institute LLC Publication Date: March 2013 Ponemon Institute Research Report
Cyber Insurance Presentation
Cyber Insurance Presentation Presentation Outline Introduction General overview of Insurance About us Cyber loss statistics Cyber Insurance product coverage Loss examples Q & A About Us A- Rated reinsurance
Aftermath of a Data Breach Study
Aftermath of a Data Breach Study Sponsored by Experian Data Breach Resolution Independently conducted by Ponemon Institute LLC Publication Date: January 2012 Ponemon Institute Research Report Aftermath
MANAGING Cybersecurity Risk AND DISCLOSURE OBLIGATIONS
MANAGING Cybersecurity Risk AND DISCLOSURE OBLIGATIONS RRD Donnelley SEC Hot Topics Institute May 21, 2014 1 MANAGING CYBERSECURITY RISK AND DISCLOSURE OBLIGATIONS Patrick J. Schultheis Partner Wilson
Is Your Company Ready for a Big Data Breach? Sponsored by Experian Data Breach Resolution
Is Your Company Ready for a Big Data Breach? Sponsored by Experian Data Breach Resolution Independently conducted by Ponemon Institute LLC Publication Date: April 2013 Ponemon Institute Research Report
Mitigating and managing cyber risk: ten issues to consider
Mitigating and managing cyber risk: ten issues to consider The board of directors is responsible for managing and mitigating risk exposure. A recent study conducted by the Ponemon Institute 1 revealed
Cyber Risk Insurance for Agents. Frequently Asked Questions
Cyber Risk Insurance for Agents Frequently Asked Questions 1 Cyber Risk Insurance About Great American Insurance Great American Insurance Group s roots go back to 1872 with the founding of its flagship
Hit ratios are still very low for Security & Privacy coverage: What are companies waiting for?
Hit ratios are still very low for Security & Privacy coverage: What are companies waiting for? Authored by Neeraj Sahni and Tim Stapleton Neeraj Sahni is Director, Insurance Channel at Kroll Cyber Investigations
OECD PROJECT ON CYBER RISK INSURANCE
OECD PROJECT ON CYBER RISK INSURANCE Introduction 1. Cyber risks pose a real threat to society and the economy, the recognition of which has been given increasingly wide media coverage in recent years.
2015 VORMETRIC INSIDER THREAT REPORT
Research Conducted by 2015 VORMETRIC INSIDER THREAT REPORT Trends and Future Directions in Data Security HEALTHCARE EDITION #2015InsiderThreat RESEARCH BRIEF U.S. HEALTHCARE SPOTLIGHT ABOUT THIS RESEARCH
The economics of IT risk and reputation
Global Technology Services Research Report Risk Management The economics of IT risk and reputation What business continuity and IT security really mean to your organization Findings from the IBM Global
NZI LIABILITY CYBER. Are you protected?
NZI LIABILITY CYBER Are you protected? Any business that operates online is vulnerable to cyber attacks and data breaches. From viruses and hackers to employee error and system damage, your business is
Understanding Security Complexity in 21 st Century IT Environments:
Understanding Security Complexity in 21 st Century IT Environments: A study of IT practitioners in the US, UK, France, Japan & Germany Sponsored by Check Point Software Technologies Independently conducted
ACE European Risk Briefing 2012
#5 ACE European Risk Briefing 2012 IT and cyber risk respondent profiles The research was carried out between 13 April and 3 May 2012. The sample comprised 606 European risk managers, CROs, CFOs, COOs
Cyber Insurance Survey
Cyber Insurance Survey Prepared for ISO November 2014 In the following report, Hanover Research presents the results of an online survey gauging insurance industry interest in cyber security and the prevalence
Sponsored By: Privacy Issues of Big Data 6.27.2013
Sponsored By: Privacy Issues of Big Data 6.27.2013 1 About Advisen is a privately-owned, independent and unbiased provider of news, data and risk analytics to the commercial insurance industry. Advisen
Third Annual Study: Is Your Company Ready for a Big Data Breach?
Third Annual Study: Is Your Company Ready for a Big Data Breach? Sponsored by Experian Data Breach Resolution Independently conducted by Ponemon Institute LLC Publication Date: October 2015 Ponemon Institute
Senate Committee on Commerce, Science, and Transportation March 19, 2015, Hearing Examining the Evolving Cyber Insurance Marketplace
Senate Committee on Commerce, Science, and Transportation March 19, 2015, Hearing Examining the Evolving Cyber Insurance Marketplace Testimony of Ben Beeson Vice President, Cyber Security and Privacy Lockton
2015 Global Cyber Impact Report
2015 Global Cyber Impact Report Sponsored by Aon Risk Services Independently conducted by Ponemon Institute LLC Publication Date: April 2015 2015 Global Cyber Impact Report Ponemon Institute, April 2015
The Cloud Balancing Act for IT: Between Promise and Peril
The Cloud Balancing Act for IT: Between Promise and Peril Table of Contents EXECUTIVE SUMMARY...2 ONBOARDING CLOUD SERVICES...3 SYSTEMS OF RECORD: THE NEXT WAVE OF CLOUD ADOPTION...6 A CULTURE OF COMPLIANCE
Driving Down Claim Costs With PREDICTIVE MODELING. December 2011. Sponsored by:
Driving Down Claim Costs With PREDICTIVE MODELING December 2011 Sponsored by: Driving Down Claim Costs With PREDICTIVE MODELING Executive Summary Tools based on predictive modeling are transforming claims
Endorsed by: Sponsored by: www.enterprisedata.com.au
Endorsed by: Sponsored by: www.enterprisedata.com.au Table of Contents Executive Summary...3 Survey Objectives...4 The Survey Process...5 Response Profile...6 Key Findings...7 Disruption Profile...9 Alternate
Data Breach and Senior Living Communities May 29, 2015
Data Breach and Senior Living Communities May 29, 2015 Todays Objectives: 1. Discuss Current Data Breach Trends & Issues 2. Understanding Why The Senior Living Industry May Be A Target 3. Data Breach Costs
Cyber Risks Management. Nikos Georgopoulos, MBA, cyrm Cyber Risks Advisor
Cyber Risks Management Nikos Georgopoulos, MBA, cyrm Cyber Risks Advisor 1 Contents Corporate Assets Data Breach Costs Time from Earliest Evidence of Compromise to Discovery of Compromise The Data Protection
Cyber Risk: Global Warning? by Cinzia Altomare, Gen Re
Cyber Risk: Global Warning? by Cinzia Altomare, Gen Re Global Warning It is a matter of time before there is a major cyber attackon the global financial system and the public needs to invest heavily in
Insurance Considerations Related to Data Security and Breach in Outsourcing Agreements
Insurance Considerations Related to Data Security and Breach in Outsourcing Agreements Greater New York Chapter Association of Corporate Counsel November 19, 2015 Stephen D. Becker, Executive Vice President
Building the business case for continuity and resiliency
Global Technology Services Research Analysis Risk Management Building the business case for continuity and resiliency The economics of IT risk and reputation and their importance to business continuity
Statutory Liability Insurance
Statutory Liability Insurance December 2015 Statutory Liability Insurance is designed to provide cover to the company and its directors, officers and employees for defence costs and fines/penalties in
Beyond Data Breach: Cyber Trends and Exposures
Beyond Data Breach: Cyber Trends and Exposures Vietnam 7 th May 2015 Jason Kelly Head of Asia Financial Lines AIG Agenda Why do companies need cyber protection Example of Cyber attack worldwide and in
Proposal form for ISAM Insurance Solution for Asset Managers
Proposal form for ISAM Insurance Solution for Asset Managers Zurich Insurance Company Ltd Zurich s ISAM solution meets the quality standards of the Swiss Asset Managers Association. www.zurich.ch/isam
Privacy Liability & Data Breach Management Nikos Georgopoulos Cyber Risks Advisor cyrm October 2014
Privacy Liability & Data Breach Management Nikos Georgopoulos Cyber Risks Advisor cyrm October 2014 Nikos Georgopoulos Privacy Liability & Data Breach Management wwww.privacyrisksadvisors.com October 2014
Internet Gaming: The New Face of Cyber Liability. Presented by John M. Link, CPCU Cottingham & Butler
Internet Gaming: The New Face of Cyber Liability Presented by John M. Link, CPCU Cottingham & Butler 1 Presenter John M. Link, Vice President jlink@cottinghambutler.com 2 What s at Risk? $300 billion in
ENTERPRISE RISK MANAGEMENT SURVEY. 2013 RIMS Enterprise Risk Management (ERM) Survey SPONSORED BY:
t RIMS2013 ENTERPRISE RISK MANAGEMENT SURVEY 2013 RIMS Enterprise Risk Management (ERM) Survey SPONSORED BY: Administered by: Advisen Ltd. Zurich Authored by: RIMS and Advisen Ltd. Publishers: Mary Roth,
Cyber Risk Management
Cyber Risk Management A short guide to best practice Insight October 2014 So what exactly is 'cyber risk'? In essence, cyber risk means the risk connected to online activity and internet trading but also
ISO? ISO? ISO? LTD ISO?
Property NetProtect 360 SM and NetProtect Essential SM Which one is right for your client? Do your clients Use e-mail? Rely on networks, computers and electronic data to conduct business? Browse the Internet
Contractor readiness to work in foreign countries
Contractor readiness to work in foreign countries Contractor readiness to work in foreign countries As the global construction market continues to expand, contractors interested in pursuing work outside
2015 Travelers Business Risk Index. Findings from a survey of U.S. business risk decision makers May 2015
2015 Travelers Business Risk Index Findings from a survey of U.S. business risk decision makers May 2015 Contents executive summary 2 Rising medical and benefit costs 3 Cyber risks 3 Legal liability 4
Defending yesterday. Financial Services. Key findings from The Global State of Information Security Survey 2014
www.pwc.com/security Defending yesterday While organizations have made significant security improvements, they have not kept pace with today s determined adversaries. As a result, many rely on yesterday
Discussion on Network Security & Privacy Liability Exposures and Insurance
Discussion on Network Security & Privacy Liability Exposures and Insurance Presented By: Kevin Violette Errors & Omissions Senior Broker, R.T. Specialty, LLC February, 25 2014 HFMA Washington-Alaska Chapter
The Impact of Cybercrime on Business
The Impact of Cybercrime on Business Studies of IT practitioners in the United States, United Kingdom, Germany, Hong Kong and Brazil Sponsored by Check Point Software Technologies Independently conducted
State Governments at Risk: The Data Breach Reality
State Governments at Risk: The Data Breach Reality NCSL Legislative Summit August 5, 2015 Doug Robinson, Executive Director National Association of State Chief Information Officers (NASCIO) About NASCIO
Insurance implications for Cyber Threats
Lillehammer Energy Claims Conference Lillehammer March 7, 2014 Insurance implications for Cyber Threats How enterprises need to prepare for the inevitable JLT is one of the world s largest providers of
Reducing Risk. Raising Expectations. CyberRisk and Professional Liability
Reducing Risk. Raising Expectations. CyberRisk and Professional Liability Are you exposed to CyberRisk? Like nearly every other business, you have likely capitalized on the advancements in technology today
RETHINKING CYBER SECURITY Changing the Business Conversation
RETHINKING CYBER SECURITY Changing the Business Conversation October 2015 Introduction: Diane Smith Michigan Delegate Higher Education Conference Speaker Board Member 2 1 1. Historical Review Agenda 2.
HCC International Information and Communication Technology
HCC International Information and Communication Technology The Growth and Evolution of the ICT Market The Information and Communication Technology (ICT) sector remains one of the fastest growing, most
Insuring Innovation. CyberFirst Coverage for Technology Companies
Insuring Innovation. CyberFirst for Technology Companies TECHNOLOGY IS EVERYWHERE. SO ARE THE THREATS. protection that goes well beyond a traditional general liability policy. CyberFirst CyberFirst is
SINGAPORE HEALTHCARE ENTERPRISE RISK MANAGEMENT CONGRESS 2014 - Data Breach : The Emerging Threat to Healthcare Industry
SINGAPORE HEALTHCARE ENTERPRISE RISK MANAGEMENT CONGRESS 2014 - Data Breach : The Emerging Threat to Healthcare Industry DATA BREACH A FICTIONAL CASE STUDY THE FIRST SIGNS OF TROUBLE Friday, 5.20 pm :
MARSH REPORT October 2015. International Business Resilience Survey 2015
MARSH REPORT October 2015 International Business Resilience Survey 2015 CONTENTS October 2015 CONTENTS 3 Introduction 4 Non-traditional risks top concerns, both in terms of likelihood and impact 7 Insurance
The promise and pitfalls of cyber insurance January 2016
www.pwc.com/us/insurance The promise and pitfalls of cyber insurance January 2016 2 top issues The promise and pitfalls of cyber insurance Cyber insurance is a potentially huge but still largely untapped
Privacy and Data Breach Protection Modular application form
Instructions The Hiscox Technology, Privacy and Cyber Portfolio Policy may be purchased on an a-la-carte basis. Some organizations may require coverage for their technology errors and omissions, while
IDENTITY SOLUTIONS: Security Beyond the Perimeter
IDENTITY SOLUTIONS: Security Beyond the Perimeter 2016 Cloud Security Alliance All Rights Reserved All rights reserved. You may download, store, display on your computer, view, print, and link to the Cloud
Cybersecurity: Considerations for Internal Audit. IIA Atlanta Chapter Meeting January 9, 2015
Cybersecurity: Considerations for Internal Audit IIA Atlanta Chapter Meeting January 9, 2015 Agenda Key Risks Incorporating Internal Audit Resources for Internal Auditors Questions 2 Key Risks 3 4 Key
RISKY BUSINESS SEMINAR CYBER LIABILITY DISCUSSION
RISKY BUSINESS SEMINAR CYBER LIABILITY DISCUSSION October 23, 2015 THREAT ENVIRONMENT Growing incentive for insiders to abuse access to sensitive data for financial gain Disgruntled current and former
Cyber Risks Connect With Directors and Officers
Cyber Risks Connect With Directors and Officers Implications of the New SEC Guidance on Cyber Security February 2012 Lockton Companies, LLC The Securities and Exchange Commission (SEC) has changed the
Anatomy of a Privacy and Data Breach
Anatomy of a Privacy and Data Breach Understanding the Risk and Managing a Crisis Adam Kardash: Partner, Heenan Blaikie LLP Robert Parisi: Senior Vice President, Marsh Leadership, Knowledge, Solutions
New York State Department of Financial Services. Report on Cyber Security in the Insurance Sector
New York State Department of Financial Services Report on Cyber Security in the Insurance Sector February 2015 Report on Cyber Security in the Insurance Sector I. Introduction Cyber attacks against financial
Coverage is subject to a Deductible
Frank Cowan Company Limited 75 Main Street North, Princeton, ON N0J 1V0 Phone: 519-458-4331 Fax: 519-458-4366 Toll Free: 1-800-265-4000 www.frankcowan.com CYBER RISK INSURANCE DETAILED APPLICATION Notes:
2012 Bit9 Cyber Security Research Report
2012 Bit9 Cyber Security Research Report Table of Contents Executive Summary Survey Participants Conclusion Appendix 3 4 10 11 Executive Summary According to the results of a recent survey conducted by
Cyber Risks in Italian market
Cyber Risks in Italian market Milano, 01.10.2014 Forum Ri&Assicurativo Gianmarco Capannini Agenda 1 Cyber Risk - USA 2 Cyber Risk Europe experience trends Market size and trends Market size and trends
IDG Connect DDoS Survey
KEY FINDINGS INTERACTIVE GUIDE 2016 IDG Connect DDoS Survey As Attacks Intensify DDoS Defenses Require New Strategies Introduction IDG (commissioned by A10 Networks ) conducted a survey of over 120 North
General Counsel Data Survey
General Counsel Data Survey Facts & Analysis In Partnership With 2014 Consero Group LLC. Reproduction Prohibited. INTRODUCTION General Counsel Data Survey Today s General Counsel wear more hats than ever.
IT SECURITY RISKS SURVEY 2014: A BUSINESS APPROACH TO MANAGING DATA SECURITY THREATS
IT SECURITY RISKS SURVEY 2014: A BUSINESS APPROACH TO MANAGING DATA SECURITY THREATS Contents Introduction... 2 Key figures... 3 Methodology... 4 Concerns and priorities of IT managers: data comes first...
Is Your Company Ready for a Big Data Breach?
Is Your Company Ready for a Big Data Breach? The Second Annual Study on Data Breach Preparedness Sponsored by Experian Data Breach Resolution Independently conducted by Ponemon Institute LLC Publication
Navigating Cyber Risk Exposure and Insurance. Stephen Wares EMEA Cyber Risk Practice Leader Marsh
Navigating Cyber Risk Exposure and Insurance Stephen Wares EMEA Cyber Risk Practice Leader Marsh Presentation Format Four Key Questions How important is cyber risk and how should we view the cyber threat?
WFG Title Agents Insurance Program wfgagents.usi.biz
WFG Title Agents Insurance Program wfgagents.usi.biz About The Program Partnership between USI and WFG American Land Title Association Compliance Best Practices of the ALTA Best Practice No. 3: Adopt and
APIP - Cyber Liability Insurance Coverages, Limits, and FAQ
APIP - Cyber Liability Insurance Coverages, Limits, and FAQ The state of Washington purchases property insurance from Alliant Insurance Services through the Alliant Property Insurance Program (APIP). APIP
Think STRENGTH. Think Chubb. Cyber Insurance. Andrew Taylor. Asia Pacific Zone Product Manager Chubb Pro PI, Media, Cyber
Think STRENGTH. Think Chubb. Cyber Insurance Andrew Taylor Asia Pacific Zone Product Manager Chubb Pro PI, Media, Cyber The World Has Changed Then Now 1992 first text message More txt s that the entire
Survey findings. Executive Summary. Subject: BYOD
2013 Survey findings Executive Summary Subject: TEKsystems IT Industry Survey series explores the hottest trends affecting the IT workforce. With over 80,000 IT professionals deployed at 6,000 client sites
Achieving Security in Workplace File Sharing. Sponsored by Axway Independently conducted by Ponemon Institute LLC Publication Date: January 2014
Achieving Security in Workplace File Sharing Sponsored by Axway Independently conducted by Ponemon Institute LLC Publication Date: January 2014 Ponemon Institute Research Report Part 1. Introduction Achieving
Managed Security in the Enterprise (U.S. Enterprise)
MANAGED SECURITY IN THE ENTERPRISE Managed Security in the Enterprise (U.S. Enterprise) March 2009 CONTENTS Executive overview... 3 Methodology... 4 Demographics... 5 Finding 1: Cyber Risk a Big Problem...
Michael Gaudet 2015 PHC 7/23/2015. Key Broker Challenges
Cyber 2015: The Market, Choosing Coverages and AEGIS Update Broker s Perspective Michael Gaudet Marsh FINPRO Energy, Power & Utility Industry Leader Marsh USA, Inc. Key Broker Challenges Coverage consistency
Navigating the complexities and risks of doing business abroad
Navigating the complexities and risks of doing business abroad Navigating the complexities and risks of doing business abroad International commerce has become increasingly accessible in recent years,
Managing Cyber Threats Risk Management & Insurance Solutions. Presented by: Douglas R. Jones, CPCU, ARM Senior Vice President & Principal
Managing Cyber Threats Risk Management & Insurance Solutions Presented by: Douglas R. Jones, CPCU, ARM Senior Vice President & Principal Overview Recent Trends and Loss Exposures Risk Management Strategies
Hacks, apps and espionage - how protected are you against cyber crime? Top 10 Legal Need-to-Knows
Hacks, apps and espionage - how protected are you against cyber crime? Top 10 Legal Need-to-Knows 24 February 2015 Callum Sinclair Faith Jayne Agenda Top 10 legal need-to-knows, including: What is cyber
Sponsored by FM Global
Enterprise Risk Management and Supply Chain Risk Management: Lots of Talk, Not Much Walk The Changing Roles and Responsibilities of Risk Management Sponsored by FM Global Enterprise risk management Over
Phone: +44 20 8123 2220 Fax: +44 207 900 3970 office@marketpublishers.com https://marketpublishers.com
Cyber Security Market by Solution (IAM, Encryption, DLP, Risk and Compliance Management, IDS/IPS, UTM, Firewall, Antivirus/Antimalware, SIEM, Disaster Recovery, DDOS Mitigation, Web Filtering, and Security
Trends in Global Media Use by the Investment Community. June 2015
Trends in Global Media Use by the Investment Community June 2015 Who We Surveyed Audience: Buy-side investors and Sell-side analysts across North America, Europe, and Asia. Data Collection: March 18 th
Data security: A growing liability threat
Data security: A growing liability threat Data security breaches occur with alarming frequency in today s technology-laden world. Even a comparatively moderate breach can cost a company millions of dollars