Does cyber insurance actually incentivize organizations to improve their security?

1.2k views5 Comments

CTO in Software, 11 - 50 employees

Does car insurance actually incentivize drivers to improve their driving ability? Flippant answer, but in practice, cyber insurance at best allows one to de-risk in event of a major issue, but doesn't do anything to improve overall security posture. That is up to Leadership.

1

Sr. Director, Head of Global MCM IT in Manufacturing, 10,001+ employees

Nope... just CYA

1

GVP in Software, 10,001+ employees

Interesting. Is it in the nice-to-have category? Or must have?

Senior Information Security Manager in Software, 501 - 1,000 employees

Ask it like this: Does auto insurance actually incentivize people to drive more safely?

Answer is: it depends on the policy.

If the policy gives specific incentives, it will improve things. If not, often status quo.

Group IT Manager Operations in Construction, 5,001 - 10,000 employees

Not at all. It is barely a risk loss mitigation

Content you might like

Where do HR and other non-security/IT departments fit into your insider risk management strategy/program? What role do they currently play?

Security & GRC Risk Management Threat & Vulnerability Management +1 more

CISO in Software, 10,001+ employees

It is challenging, but sometimes very important for HR to work with IT and Security for scenarios where employees will be laid off, etc. as those people are often higher risk for performing unauthorized or malicious acti...read more

Read More Comments

4k views1 Upvote7 Comments

What are some great on-prem and SaaS programs for internal PKI and Certificate Life Cycle Management?

Applications & Platforms Security & GRC

Director of IT, Self-employed

DigiCert: DigiCert offers cloud-based certificate management services that are known for their ease of use, scalability, and strong security. They provide solutions for both internal and public-facing certificates.

OpenSSL: ...read more

Read More Comments

1.8k views1 Upvote2 Comments

What is the #1 threat to cloud security at your organization?

Cloud Security & GRC Compute +6 more

Malware22%

Data Exposure32%

Weak/Broken Authentication14%

Insider Threats15%

Application Vulnerabilities11%

Overprovisioned Access5%

Other0%

218 PARTICIPANTS

749 views2 Upvotes

How does your company handle AD accounts after a person leaves the company? We have been changing the passwords, disabling them, and moving them to a separate OU, but I'm interested to hear if you do anything else.

Product development engineer in Manufacturing, 201 - 500 employees

whattt

Read More Comments

936 views2 Comments

Which deception tool do you use, or plan on using?

Security & GRC Vendor Management

Acalvio Shadowplex8%

Attivo ThreatDefend Deception and Response Platform40%

Fidelis Deception13%

TrapX DeceptionGrid 7.07%

Other (comment below)32%

198 PARTICIPANTS

2.2k views2 Comments