Does your company accept digital payments or store customers’ names, addresses, credit card information, medical data, or financial information online or offline? If the answer is “yes,” you may need cyber security insurance.
Unfortunately, your general liability insurance won’t cover claims related to data breaches. Because many traditional general liability policies weren’t written with cyber risks in mind, they don’t include precise language about cyber risks. If your small business stores customer data, you may want to consider a separate cyber security insurance policy.
Cyber security insurance, also known as cyber liability insurance or cyber insurance, helps reduce the financial risks of doing business online. It protects small business owners from financial losses caused by data breaches, data theft, system hacking, malware attacks, and ransomware extortion payments.
This type of small business insurance is an extension of errors and omissions (E&O) insurance, which protects against faults and defects in the services a company provides.
The world is increasingly doing business digitally. While this shift to computers and internet-based workflows has made doing business easier, it has also created an opportunity for data breaches and cybercrime to occur. As such, any business, regardless of size, that creates, stores, and manages electronic data online needs cyber security insurance. This includes:
The compromise, loss, or theft of electronic data can harm a business. You can lose revenue, customers, and reputation. In addition, if attacked, a small business owner may be liable for damages linked to third-party data theft.
Not adequately protecting your small business from cyber attacks can leave you unnecessarily vulnerable. Verizon estimates that 43 percent of data breaches happen to small businesses, which are especially vulnerable to malware, ransomware, brute force, and social attacks.
And, like many legal headaches, a breach comes with a steep price tag. In fact, the average data breach costs businesses with fewer than 500 employees $2.98 million, according to a report by IBM and the Ponemon Institute.
Cybersecurity insurance generally comes as either first-party or liability coverage. Each policy type protects small businesses in different circumstances. The most common first-party cybersecurity coverage is data breach insurance.
If personal customer information is exposed or stolen, most first-party policies typically cover:
Third-party cyber liability coverage protects your business if a third party sues you for damages in connection with a cybersecurity incident. This covers:
Typically, cyber security insurance does not protect small business owners from losses related to:
Cyber insurance policies are sold by many of the same insurers that provide other small business insurance products like business liability insurance, commercial property insurance, and E&O insurance.
Some insurer carriers sell cyber insurance as an add-on to a business owner’s policy (BOP). Small business owners can also purchase coverage separately.
Cyber insurance costs typically depend on the company’s annual revenue and industry. To apply, you’ll likely need to provide documentation via an approved assessment tool, such as that offered by the Federal Financial Institutions Examination Council, or submit to a security audit. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) helps organizations prepare for, respond to, and mitigate the impact of cyberattacks. It encourages small businesses to improve their cybersecurity to keep premium costs affordable.
Because policies will vary, experts recommend that small business owners review policy details closely to ensure they contain the protections and provisions appropriate for this specific company and industry. In addition, be sure policies protect against known as well as emerging cyber risks.
Thanks for reading! Please note that this content is intended for educational purposes only. As best practices change regularly, you should refer to your trusted advisor for specific counsel.
If you are unsure whether you need cybersecurity insurance, consider speaking to a business insurance agent near you to assess your risk level and potential premiums to determine if it’s the right investment for your company.
