Netwrix Survey: Half of Organizations with Cyber Insurance Implemented Additional Security Measures to Qualify for the Policy or Reduce Its Cost
September 26, 2023 - Netwrix, a cybersecurity vendor that makes data security easy, surveyed more than 1,600 IT and security professionals worldwide to reveal how their organizations reduce the financial impact of a data breach via a cyber insurance policy.
According to the survey, 44% of organizations are insured and 15% plan to purchase a policy within the next 12 months. Before being offered a policy, organizations typically need to go through a security audit by the prospective insurer.
The insurer's audit will highlight security gaps in the IT ecosystem and provide recommendations on how to overcome them. In some cases, implementing additional security controls is mandatory to even qualify for a policy. In addition, some organizations choose to invest in more security measures because it reduces the cost of the insurance policy.
Dirk Schrader, VP of Security Research at Netwrix
We asked respondents what requirements they had to meet in order to qualify for a policy. The most requested measure was multifactor authentication (MFA), named by 63%, followed by patch management (55%) and regular security training for business users (47%). In addition, 38% said they had to meet requirements for identity and access management (IAM), while 36% revealed they had to implement privileged access management (PAM) controls. Indeed, according to Gartner® , “Insurers often require organizations to deploy a PAM tool, along with MFA for administrative access, to mitigate the risk of breaches and malware events.”*
When addressing the requirements or recommendations from an insurer, it is vital to assess the dependencies between the requested controls. For example, in order to require MFA for access to particular types of data, it is necessary to know where sensitive and regulated data resides, as well as to have control over user and administrative privileges.
Ilia Sotnikov, Security Strategist at Netwrix
To learn more about security trends, check out the complete 2023 Hybrid Security Trends Report .
Netwrix solutions are available in Romania through Simple IT, Netwrix Partner in Romania.
About Simple IT
SIMPLE IT is a distributor for software solutions and hardware appliances, adding value with consulting, training, implementation, configuration and support services, backed by certified specialists, in order to offer the best IT experience to customers and partners. For more information, please visit www.simpleit.com.ro.