Baltimore bought $20M in cyber insurance. Such policies are becoming more common - Technical.ly Baltimore

Civic

Oct. 18, 2019 12:05 pm

Baltimore bought $20M in cyber insurance. Such policies are becoming more common

Liability protection is entering the digital realm. We asked an expert to explain.

In the wake of the spring’s ransomware attack against city government computer networks, the City of Baltimore took a step this week toward protection in the event of future cyber attacks. But instead of technology, this particular purchase involved insurance.

The Baltimore Board of Estimates, which votes on spending decisions for the city, approved the purchase of cyber liability insurance for a total of about $835,000. Between two policies from Chubb Insurance and AXA XL Insurance, the city has $20 million in cyber liability coverage.

According to city documents, this provides for cyber incident response coverage, as well as costs of business interruption and digital data recovery, among other provisions.

While work is ongoing of “building a better and stronger and more protected network” to prevent future attacks, these policies offer a “safety net,” said Sheryl Goldstein, the mayor’s deputy chief of staff of operations. Cyber attacks are becoming more common against public entities, as Baltimore was among more than 20 cities to be hit with a ransomware attack this year.

We cover plenty of local companies that are offering ways to secure and protect data. At the same time, companies purchase insurance policies to protect against unforeseen losses. Cyber insurance brings this protection into the digital realm.

In general, cyber insurance is designed to provide for protection in the event of unexpected data loss, or if systems become compromised and are rendered inoperable, said Jeff Bathurst, director of SC&H Group’s IT Advisory Services practice.

It’s a growing tool for any organization that leverages technology. On the one hand, the threat landscape is changing all the time outside an organization. And inside, there is a risk that the people operating that technology will make a mistake.

Increasingly, business-to-business arrangements include requirements that companies have cyber insurance in place, as well: “It should be a part of the standard insurance portfolio for every organization,” Bathurst said.

Advertisement

In the event of a breach, a cyber insurance company coordinates third-party teams to provide legal help, as well as technology expert to help remediate the breach. Some insurance companies also work with teams that negotiate with attackers who are holding data at ransom on a company’s behalf — though it’s not clear whether the city’s policy has this service.

The City of Baltimore is spending less than a million dollar for insurance. Contrast that with $18 million that city officials have said was spent to recover from this year’s ransomware attack.

In the field in general, Bathurst said the insurance product continues to evolve even as it becomes more ubiquitous. Insurance companies are working to come up with more accurate models, while companies are still figuring out how much cyber insurance coverage they need.

For companies, Bathurst said, “one of the biggest challenges for people trying to address a cybersecurity event is, how far does it go and will we ever know?” Because unlike theft of a physical item, cyber attacks infect a network and spread, making it harder to understand the extent.

Companies: City of Baltimore
-30-
CONTRIBUTE TO THE
JOURNALISM FUND

Already a contributor? Sign in here
Connect with companies from the Technical.ly community
New call-to-action

Advertisement

Cybersecurity startup Code Dx wins $2M seed investment at DataTribe Challenge

Westminster’s MAGIC draws 88 teams for Capture the Flag cybersecurity competition

Cybrary’s $15M Series B will be used to expand its cybersecurity training platform

SPONSORED

Baltimore

How this lawyer is helping entrepreneurs bark up the right tree

Philadelphia, PA

Vistar Media

QA Engineer

Apply Now

Philadelphia, PA - Center City

Odessa

Business Architect

Apply Now

Philadelphia

Vistar Media

Sr. Software Engineer

Apply Now

City of Baltimore web portal aims to provide more transparency in local lobbying

A ‘Moon colony’ challenge gave Maryland Girl Scouts a hands-on cybersecurity lesson

AvengerCon IV showed how U.S. Cyber Command is building community

SPONSORED

Baltimore

Get to know SmartLogic’s culture of plants, podcasts and productive client relationships

Philadelphia

Vistar Media

Front End Engineer

Apply Now

Baltimore, MD

14 West

Qlik Developer

Apply Now

Baltimore, MD

14 West

Senior Qlik Developer

Apply Now

Sign-up for daily news updates from Technical.ly Baltimore

Do NOT follow this link or you will be banned from the site!