Interesting question. Is cyber an economically insurable risk today? There’s little history to enable understanding and pricing, it’s a complex risk to manage, and few organizations do it well, and only around 45% of organizations have cyber insurance Cyber is…
Cybersecurity risk management set out in cyber regulation requires a robust program of risk transfer. This involves both a focus on an organisation’s internal risk management processes to reduce inherent risk and its use of risk transfer products such as…
Cyber insurance is a contract and as with all contracts terms and conditions apply. Cyber insurance is no exception, as demonstrated where the cyber insurance policy did not cover a cyber attack against Hamilton City in 2024. As the City…
Cyber essentials makes you 92% less likely to file a cyber insurance claim. A statistic that is unjustifiable. One should review ENISA, the US DoD or Australian Government cyber strategy, if the UK wishes to set a bar for cyber…
Thanks for sharing Bryan Foss. It’s summer and time for a data breach. Allianz Life Insurance Company a subsidiary of German based Insurer Allianz, announced its been hacked. It’s reported that On July 16, 2025, a malicious threat actor gained…
A further indication of the cyber regulatory train building up stream and pulling away form the platform. As European Financial Supervisory Authorities (ESA) (EBA, EIOPA, ESMA – the ESAs) published a guide on the oversight of the Digital Operational Resilience…
The supply chain effects of the cyber attack on Marks and Spencer are being felt by it suppliers. As Fashion Brand Sosander downgraded its profits and sales guidance for the year. Sosander cut £2.6million from its full-year sales expectations after…
Thanks for sharing Bryan Foss. Cyber is a dog-eat-dog world and while it remains one of the most profitable businesses, threat actors will be looking to eat each others lunch. It was reported this week that the Chairman of Marks…
From 1st July 2025 The Australian Prudential Regulatory Authority (APRA) APRA requires regulated entities to manage continuity of critical services, through a prudential standard on Operational Risk Management (CPS 230). CPS 230 aims to ensure that APRA regulated entities are…
Faisal Khan, an important read for the insurance industry, as the IAIS – International Association of Insurance Supervisors publishes an application paper on the supervision of AI for insurers. The IAIS is one of a number of insurance industry standard…
