Cyber security – Strategies for keeping your business safe

Cyber security – Strategies for keeping your business safe

The latest Cyber Crime statistics from the Australian Cyber Security Centre (ACSC) show that there was a cybercrime reported every 8 minutes (it was 10 mins last year, so they are becoming more frequent), totalling 68,000 in the past 12 months. The most common type of cybercrime reported is Fraud (40%) which includes online shopping scams, as well as banking scams. Identity theft and misuse of personal information (7%) and then cyber related abuse 12%. The biggest threat was ransomware, as it requires minimal technical expertise, is low cost and can cause businesses significant problems, including crippling core business functions. From a recent survey, 70% of organisations are not protected by a cyber insurance policy, which can offer immediately help in dealing with hackers, ransom demands and Privacy Breaches.

A helpful resource you can use to keep your business safe is the government’s cyber alert website. This site provides you with an up-to-date list of identified cyber security threats and it’s currently reporting that the cyber risk of attacks on Australian networks, due to the Ukraine war, is high. It’s also reporting that there’s a medium risk of high-impact ransomware attacks against critical infrastructure and a medium risk of email scams targeting construction companies.

With so many different threats coming from so many different directions, you need to reduce your cyber risk as soon as possible. Here are six simple steps to get you started.

6 Steps for keeping your business safe against cyber threats

If you’re not sure if your business is secure against cyber threats, you can use the government’s online tool to assess your cyber risk. You can also access their cyber security guide for small businesses that’s designed to help you keep your business safe from online scams and other cyber threats.

Here are six tips drawn from this guide that will help you reduce your cyber risk very quickly.

1. Update your software

Always ensure that your operating systems, programs and apps are updated as soon as possible as this reduces your cyber risk. It’s one of the best ways to increase your cyber security and even better, you can turn on automatic updates so you never forget.

2. Backup your systems

Another way to keep your business safe is to regularly back up all your most important files, for example, your financial records and customer databases. This allows your business to quickly recover from a cyber-attack whilst minimising downtime.

3. Enable multi-factor authorisation

Requiring two or more proofs of identity to access your systems is one of the most effective ways to keep your business safe against unauthorised access. Cybercriminals might be able to steal passwords, but it’s much more difficult to steal two methods of authentication.

4. Limit access to your systems

Not all of your employees need access to all of your files, so limiting access to the ones they require for their work also reduces your cyber risk. This is particularly relevant when people work from home or when external providers require access to your systems.

5. Increase the complexity of passwords

When two-factor authentication isn’t suitable, you should ensure that passwords or even better, passphrases are not easy to remember. The longer and more complex these passphrases, the harder they are to crack. A password manager helps to keep these passphrases secure.

6. Employee education

It’s important to increase your employee’s scam awareness, as well as their knowledge of cyber security. They need to know how to prevent, recognise and report any cyber threats, helping to keep your business safe and your networks secure.

Do you need cyber risk insurance?

Another critical step to protect yourself and your business from the financial and reputational impact of cyber security breaches is to take out the right type of cyber insurance. If the worst does occur and your business experiences a cyber-attack, then you will have the support of the insurers and recovery experts to get the business back up and running as quickly as possible and pay all the costs.

Find your local adviser to talk to an insurance specialist today.

Important Information

This communication including any weblinks or attachments is for information purposes only. It is not a recommendation or opinion, your personal or individual objectives, financial situation or needs have not been taken into account. This communication is not intended to constitute personal advice. This type of insurance product is designed for small and large businesses, which want to be covered against financial loss relating to accidents or personal injury involving contractors or sub-contractors.

We strongly recommend that you consider the suitability of this information, in respect of your objectives, financial situation and needs before acting on it. This document is also not a Product Disclosure Statement (PDS) or a policy wording, nor is it a summary of a particular product’s features or terms of any insurance product. If you are interested in discussing this information or acquiring an insurance product, you should contact your insurance adviser to obtain and carefully consider any relevant PDS or policy wording before deciding whether to purchase any insurance product.

Cyber Insurance

Technology has never been so deeply entwined in our businesses. While it delivers significant efficiencies and convenience, it also comes with significant cyber risks.

Cyber Insurance

What is Cyber Insurance?

During the 2020-21 financial year, the Australian Cyber Security Centre (ACSC) observed self-reported losses from cybercrime in Australia totalling a staggering $33 billion. Most businesses rely on technology to some extent, which means they’re exposed to increasingly sophisticated cybercriminals. According to the ACSC, an average of 164 cybercrime reports are made by Australians every day – that's about one report every 10 minutes.

Cyber Insurance covers the physical loss or damage to information, IT systems and networks. It can also cover loss of profits to be business, caused by the introduction of malware, extortion or hacking, as well as management of the incident itself.

Why is Cyber Insurance important?

Businesses must have guards against hackers and other types of cyber breaches. What’s more, because of stricter data privacy laws, they’re increasingly required to ensure personal information is secure. A breach will be investigated and require costly actions, including contacting hundreds or thousands of customers. There’s also the potential for hefty fines and penalties.

It’s easier to buy an insurance cover that protects your main cyber-related risks of damage to your systems and recovery, rather than trying to find specialist consultants to rebuild systems and keep the business operating. Cyber Insurance policies also generally include significant support with managing the incident, which can be essential when faced with reputational damage or regulatory enforcement.

What does Cyber Insurance cover?

There is a wide range of Cyber Insurance available. While all policies cover liability to third parties for passing on viruses, some also cover damage to your own networks.

Additional sections that we recommend considering include:

incident response – specialists to identify the issue and repair
lost income and additional costs related to the incident
data recovery and restoration
consumer notification costs and ongoing monitoring costs
legal defence costs
cyber extortion management and fees
crisis and PR management of the incident
management of communications with regulators.

Managing cyber risks to your business

Cyber Insurance is a key part of your management of cyber incidents and attacks. Many resources are available to help minimise the likelihood of a successful attack, including the Australian Cyber Security Centre.

The top 3 things that you can do easily are:

Update your devices to protect information.
Set up multi-factor authentication for logging on.
Back up your data real-time of at least daily.

Explore your insurance options today. Talk to your professional insurance and risk adviser and get the best cover for you and your risks.

Frequently Asked Questions

What is not covered by Cyber Insurance?

Like any insurance, not everything is covered by your policy. Some common exclusions include:

personal injury
consumer redress funds, unless specifically covered
loss of money or securities, unless specifically covered
your intentional conduct or wrongful use of personal information
failure to take reasonable care in securing your IT systems

Is Cyber Insurance required in Australia?

Cyber Insurance can help you to manage your business's financial risks. While it isn’t mandatory in Australia, it is expected that certain businesses have some level of cover in place – including critical industries, care, finances and utilities. Without insurance, you would be forced to pay out of your own pocket for repair, recovery, and remediation costs from a cyber incident or attack.

What are the main areas covered under Cyber Insurance?

Cyber Insurance typically helps you with expenses spent on five main areas:

Third-party liability
Emergency response and business continuity assistance
Recovery of your data and IT systems
Business interruption due to interference to your systems
Loss to you from crime or fraud.

Does Cyber Insurance cover data loss?

Yes, Cyber Insurance covers your lost information and data, as well as any loss caused to your customers or suppliers if a virus is transferred. It also covers:

notifying potentially affected customers of a data breach
employing computer forensic experts to identify and restore data
repairing damaged computer systems, both hardware and software, to enable the data and systems to operate.

What are the benefits of Cyber Insurance?

Cyber insurance is a specialist insurance policy that provides cover against cyber incidents or attacks that aren’t covered by other insurance policies, such as professional indemnity, management liability, or business packs. This could potentially leave a gap in cover. A Cyber Insurance policy will pay for legal costs, crisis managers, and payment of credits and refunds to customers.

Technology has never been so deeply entwined in our businesses. While it delivers significant efficiencies and convenience, it also comes with significant cyber risks.

Business Interruption Insurance

From your family and employees to customers and suppliers, there are a lot of people who depend on your business opening its doors each day.

Business Interruption Insurance

What is Business Interruption Insurance?

Business interruption, also known as Loss of Profits or Consequential Loss Insurance, is a special insurance cover. It pays the business owner any fixed overheads and similar business costs following a fire, storm damage or other major events that prevent a business from trading. This insurance starts from the time of the fire until the business is back up and running to where it was before the damage occurred.

Why is Business Interruption Insurance important?

Starting and running a business always carries risks. The key financial risks can be managed by buying insurance cover like Property Damage, Public and Product Liability, and Burglary.

For businesses of any size, Business Interruption Insurance is essential to ensure that money continues to be received (from the insurer) to pay fixed expenses – such as lighting, power, bank loans, wages, transport, plus net profit related to a reduction in turnover.

What does Business Interruption Insurance cover?

Business Interruption Insurance compensates business owners for:

net profit expected to be earned during the time the business takes to get back up and operating to its pre-loss output
any fixed expenses (interest on loans, wages etc.), that keep on being incurred, regardless of whether the business is operational or not.

Variable expenses, like input purchases and delivery costs, would not be covered, as they won’t continue if the business isn’t operational and making goods or products.

The time period for getting the business back up and running to pre-loss levels (plus any expected growth) may take a few weeks or many months, depending on how badly damaged the business was, the loss of customers, and other factors. Working out the maximum time you need insurance for is important – but 12 months is a good place to start.

Choosing your insurance policy

Key factors to consider when choosing the basis of cover, which will impact your premium, include:

Indemnity period. How long do you need the cover for? Depending on the situation, how long will it take your business to return to pre-loss trading?
Payroll. How much of your payroll do you need to insure and for how long? Insurance companies won’t pay employees to sit at home for six months while the business is being rebuilt, but redundancy payments can be insured.
Growth. Consider the trends in your business: is it growing rapidly, or is it a mature business?
Economic cycles. Are there any major seasonal fluctuations or economic cycles?
Suppliers and customers. Do you need to cover specific customers or suppliers that you rely on. If they couldn’t operate, would it impact your business?
Additional or increased costs of working. Most businesses spend a lot more money in the short term to try and minimise the impact on their business. For outsourcing a valued customer's work to another business for a short while, or if you own a building that’s fire damaged when your business is located, and you need to rent premises for manufacturing, this will be a new additional cost of the rent.

Frequently Asked Questions

● How Is It Calculated?

There are two main ways to purchase this type of insurance:

Weekly income or Sales
Annual gross profit (being 12 months turnover less variable expenses, also insuring net profit).

Does it cover loss of profits for services firms?

For example, solicitors, investment consultants, and medical or dental practices. As many of these businesses can continue to operate from home or serviced offices, gross profits are generally not insured, only additional or increased working costs.

However, businesses that depend on their specific location, such as dentists or allied health, that have their customers in a specific area may consider Gross Profits Insurance.

In Summary

Storms, natural disasters, and fires are regular occurrences in Australia. Major interruption to business, where there is no income for an extended time, is one of the most significant risks a business will face, regardless of its size or industry. A large percentage of businesses that don’t have Business Interruption Insurance never reopen. It’s difficult to pay employees or mortgage costs, suppliers or even the power bill if there is no sales or revenue.

In addition, trying to get your business back on its feet can be overwhelming – taking management’s focus away from day-to-day business, as well as placing significant financial strain on you and the business.

We can help you find the best cover to keep your business running as smoothly as possible.

From your family and employees to customers and suppliers, there are a lot of people who depend on your business opening its doors each day.

Professional Indemnity Insurance

Professional Indemnity (PI) Insurance isn’t just limited to typical ‘professions’ such as accountants, engineers, lawyers, doctors and architects. Essentially, anybody providing advice or consultancy services for a fee has an exposure that needs to be considered.

Professional Indemnity Insurance

What is Professional Indemnity Insurance?

If you or your business provide professional advice or services, then you’re likely to need Professional Indemnity (PI) Insurance.

This insurance provides and pays your legal defence costs in the event that a customer complains that they followed negligent advice and suffered a financial loss – even if there’s no real basis for the complaint. If there was negligence, PI Insurance will also pay any damages awarded by the court.

Without Professional Indemnity Insurance, you or your business could be faced with having to organise your own legal defence, and pay potentially large legal bills as well as damages awarded by the court. The average claim amount is over $100,000 for legal costs, expert reports, and damages, so it can be a large amount to have to find quickly.

Typical professionals that purchase PI Insurance include:

real estate agents
construction consultants
healthcare or allied health
IT consultants
lawyers
doctors.

Why is Professional Indemnity Insurance important?

Professional Indemnity Insurance is mandatory for many professions and must be in place before starting a business. It’s recommended that you check with your association or insurance adviser to find out if PI cover is compulsory, and the sum insured required.

For other professionals, although this insurance cover may not be compulsory, it’s an easy way to protect yourself and your business from large financial losses. Even with the best training or risk management, people still make mistakes, contractors can provide incorrect specifications, and advice can be misunderstood.

It’s worth noting that the cover provided by Professional Indemnity is different from Public Liability Insurance which covers defence costs and any damages relating to personal injury caused to people or damage to their property. This is not the same as financial loss caused by an architect placing walls in the wrong location on plans or an IT professional recommending the wrong software.

What does Professional Indemnity Insurance cover?

The exact cover will depend on your occupation and scope of activities. Broadly speaking, Professional Indemnity Insurance covers any negligent act, error or omission relating to:

misleading, inaccurate or negligent advice; breach of confidentiality or privacy
breach of consumer, competition, and fair trading laws
loss of documents
infringement of intellectual property rights
malpractice, misdiagnosis, failing to order the appropriate tests, failure to treat
defamation, libel or slander, including costs of disciplinary proceeding costs, claim investigation and expert reports
public relations costs
legal defence costs
payment of damages.

As you can see, Professional Indemnity is a complex insurance with a wide range of cover options. We’ll work with you to understand your business, provide options to manage your professional risks, and recommend insurance cover.

Frequently Asked Questions

Who needs professional indemnity insurance?

Anyone who is specially trained, provides advice or service, and is a member of an association or profession can purchase this type of cover. Real estate agents, construction consultants, engineers, healthcare or allied health professionals, designers, lawyers, IT consultants and doctors all need Professional Indemnity Insurance.

In some workplaces or industries, it is mandatory to have this cover. Even if not compulsory, this insurance is important to protect you and the business from having to pay significant legal costs, as well as damages, if found to be at fault.

How much does professional indemnity insurance cost?

Professional Indemnity covers you or your business for legal costs and any damages if there is an actual or alleged act, error or omission that causes a financial loss to a client or customer.

Premiums are typically based on:

Your industry – for example, construction, IT, or medical, some are at higher risk than others.
The scope of your business activities – for example, whether you’re a fire engineer or an IT engineer, the turnover/ revenue and number of employees or contractors.
Prior claims experience – the more claims or lawsuits, the higher your premium (and excess) are likely to be.

● What is the minimum professional indemnity insurance?

The amount of Professional Indemnity cover you need depends on:

your occupation and potential for financial loss to the customer if there was negligent advice
any mandatory requirements of your association
the level of cover you choose, based on your level of risk, as well as the cost of the insurance.

Because different professions present varying levels of complexity and risk, we recommend talking with your insurance adviser – they are professionals who can work to understand your business and provide you with options to choose from.