Carriers are not offering policies to organizations lacking strong security controls
Real time documentation of continuous compliance to world wide standards such as CIS (Center for Internet Security) or NIST, allow either us or your team to print out deep detailed documentation of your organization’s world class security portfolio. The underwriters are seeking “good risks” policyholders like your organization.
Insurance loss rates due to ransomware, wire fraud, invoice spoofing, phishing, reputation damages, data loss, and business disruption have forced carriers to dramatically increase rates for cybersecurity coverages (or drop coverage all together) – Warren Buffet is avoiding the cyber insurance issuance at Berkshire Hathaway
LeastTrust IT has several relationships with Insurance carriers and brokers specifically serving small and medium sized business. We would be happy to introduce you and assist where needed
Every couple months the insurers require additional controls. The most recent being vulnerability management and patching and electronic money handling (Wires, ACH, etc). LeastTrust’s standard controls continue to exceed the requirements for the past 3 years and we have yet to need to add additional controls to meet any application
The good news is that year or year increases have fallen off. At some point in the future we hope that the insurers will differentiate organizations representing superior risks and warrant lower premiums. Its still in flux, but one can hope