Good practice last year isn’t good enough anymore.
Even cyber-insurance providers are getting more selective before accepting cover, or worse, before paying claims.
With the number of claims skyrocketing insurers are increasingly asking, “What did you do to protect yourself from the obvious and known risk from cyberhackers?”
The levels of protection you put in place 1 or 2 years ago probably aren’t adequate for the threats today. They are evolving so rapidly.
So what can you do?
Hackers aren’t waiting for you to make a decision to put protections in place.
They are spending every waking moment trying to find new ways of stealing your data. They have set themselves up as businesses to do evil. They hire the best and brightest talent, and have the latest tech – simply because it’s worth it. Its organised crime and these guys are the mafia of the modern age.
We see continuous hacks on most of our clients. These are attempts to penetrate their firewalls, or guess their passwords on Office 365. We see fake webpages through phishing attempts, and we see techniques to harvest password reset questions by asking for favourite teachers, or first cars, or favourite band on platforms like FaceBook.
That’s why your cyber-insurance and business continuity insurance providers will be starting to ask more demanding questions when you renew your cover. They are well aware of the risk and they want to know that you have taken all reasonable steps.
You need to be able to reassure them that you have:
- deep endpoint protection
- a penetration and vulnerability assessment
- data governance that is fit for purpose
- awareness programmes for all users and verification
- dark web monitoring
- multi-factor authentication and complex passwords
and so much more – the very items we have included in our KARE for Security services.
The question for you, and your insurer, is what level of protection is appropriate for your organisation so your insurer will cover you if you need to claim? That is why we have two levels of cyber-protection, and, because this isn’t static, it is why we keep investing and researching additional tools to help defend you from harm.
The Hackers are turning up their attacks on you – are you turning up your defences to match?
One quote we saw recently that rang true was:
“A cybercriminal only has to be lucky once, while a defender has to be lucky every minute of every day.”
What’s your next step? We’ve created a simple 9-point checklist to help you navigate the cyber-risk landscape and find the right solution for you.
Beware – Social Engineering! The number one security threat to business is your people!
Every business collects data, from sales leads to financial transactions and everything in between. Increasingly data is the new ‘gold’. The problem is, unlike actual gold that you can put in a vault, data is weightless, and your staff need access to your data to get...
Dodging dodgy websites
Not too long ago, (some) businesses tried to limit websites that people could visit during working hours. They blocked social sites and Trademe and so forth. The logic was that people should be working, not surfing the net. Luckily this seems to have faded – staff are...
What will the Microsoft annual/monthly licensing changes mean for you?
A few weeks ago, we warned you about changes to Microsoft 365 pricing coming in at March 2022. We still don't know the exact prices. Microsoft have published some USD numbers and we have used those to base an estimate on, but we don't know for certain what the final...
Does the new Chinese PIPL law apply to you?
If you do business in China, you need to know about the “PIPL” It’s the Chinese equivalent of the GDPR from the EU – and your responsibility to protect the data privacy of the Chinese. The law came into being relatively quickly and has already taken effect as at...
Security Training and Awareness offer
We are deploying some new tools for our KARE for Security clients. For a limited time we can share these with all our clients to give you and your colleagues some great e-security awareness training. The holiday season is targeted by scammers, they know that employees...
Zero-Trust Networking for real business?
Zero-trust sounds extreme Humans like to trust. We trust everyday as we drive down the street that the people coming the other way will stay in their lane. We trust that the restaurants we visit prepare our food properly and hygienically. We trust that our doctor...
Fact or Fiction? My files are in the cloud, I don’t need to worry about security any more!
If only life were so simple! We have some clients that ask us about file security in the cloud as if the answer is an absolute. Of course it isn't. The cloud is more secure than an on-premise system Assuming we’re talking about a reputable mainstream cloud, the...
Are your back ups keeping up?
Why do we need offsite, air-gapped backups? About ten years ago the age of the tape ended. USB 3 was the nail in the coffin for tapes. Finally we had something that was just as fast, but supported random access. At about the same time, we moved from data backups, to...
Deepscan Antivirus and AntiMalware
We've warned before about vulnerabilities like Spectre and Meltdown. The basic precautions are to keep your Windows, Office and other software completely up to date, and of course keeping your anti-virus current. That’s going to stop most things but lately we’ve seen...
One charging cable to rule them all?
How many old phone chargers do you have tucked away at the back of cupboards? It is such a waste of resources to have all those plastic and metal boxes that you don’t want to throw way, but can’t be sure you will ever use again. Just to make things slightly worse,...