By Chinenye Anuforo
In a surprising twist, the quest for cyber insurance is driving a significant improvement in cybersecurity. A recent Sophos survey revealed that a whopping 76 per cent of companies have actually beefed up their cyber defenses specifically to qualify for cyber insurance. This trend highlights the growing importance of cyber resilience and the potential for insurance to act as a catalyst for positive change.
However, the report, titled “Cyber Insurance and Cyber Defenses 2024: Lessons from IT and Cybersecurity Leaders,” painted a complex picture. While companies are investing more in security, the fight against cybercrime remains an uphill battle.
The survey, which polled 5,000 IT and cybersecurity leaders across 14 countries, found a sobering reality: recovery costs from cyberattacks continue to outpace insurance coverage. Only 1 per cent of companies reported receiving full reimbursement for their post-attack expenses. This highlights a significant gap between the financial impact of cyberattacks and the current capacity of cyber insurance policies.
Despite the coverage limitations, the report identified a positive side effect of the insurance focus. Nearly all companies (99 per cent) that improved defenses for insurance reported experiencing broader security benefits beyond just cost savings. These benefits included:
•Improved Overall Protection: Companies reported a stronger overall security posture due to the implemented measures.
•Freed IT Resources: By automating and streamlining security processes, IT teams were able to focus on other critical tasks.
•Fewer Security Alerts: Improved defenses led to a reduction in false positives and a clearer picture of real threats.
The Sophos report suggested that the rise of cyber insurance may ultimately lead to a more secure landscape. As companies invest in defenses to qualify for coverage, overall security posture may improve. “Cyber insurance won’t eliminate ransomware attacks,” concluded Chester Wisniewski, Director, Global Field CTO at Sophos, “but it could be a significant part of the solution.”
The findings underscored the need for a multi-pronged approach to cybersecurity. While cyber insurance can play a valuable role, companies must prioritize fundamental security measures like patching vulnerabilities and implementing multi-factor authentication. By combining proactive defense with financial protection, businesses can build a more resilient security posture in the face of ever-evolving cyber threats.
The post Companies boost capacity to qualify for cyber insurance appeared first on The Sun Nigeria.