Does anyone have any recommendations on cyber security insurance? How do I determine the amount of coverage a company needs?

1.1k viewscircle icon2 Comments
Sort by:
Senior Information Security Manager in Software3 years ago

If you are a large company, this is a major undertaking that requires a complete understanding of your business and the data stored. Find a good consultant and insurance underwriter who can help.

Here is a really good book about cyberinsurance:  https://www.rsaconference.com/library/Blog/bens-book-of-the-month-review-of-cyberinsurance-policy

Lightbulb on2
CIO in Services (non-Government)3 years ago

You really need to sit down with the rest of your C-Suite and go through this, it's actually a very complex answer.  You need to know a lot of things, like how much does each hour of downtime cost you, what kinds of fines are levied by the regulatory agencies you report to (HIPAA, GDPR, etc.,) how much damage to your corporate reputation cost you, and on and on.  It's an entirely specific set of parameters that can only be calculated by working through what a cyberattack would do to you, and also what LEVEL cyberattack it is.  If a single user endpoint gets infected by ransomware, what does that cost?  How about your main application server in The Cloud?  How about your entire Cloud Infrastructure?

Basically, you have to quantify the scope/s of what constitutes a cyberattack, then work out the cost of each level of attack, all the way up to a corporate doomsday scenario where you go out of business, and insure yourselves accordingly.

Lightbulb on2

Content you might like

Recruitment12%

Upskilling Current Staff62%

Contracting Specialists14%

Combination Approach10%

View Results

Big Data16%

Remote Work19%

Microservices / Containerization13%

CI / CD7%

Zero-Trust15%

Automation2%

Digital Transformation16%

Cloud / Cloud Native2%

DevOps or DevSecOps3%

Other (comment)1%

View Results