Half of Organizations with Cyber Insurance Implemented Additional Security Measures to Qualify for the Policy or Reduce Its Cost

28% of organizations made changes in order to reduce their premium — and 22% had to improve their security posture to simply be eligible for the policy.

FRISCO, Texas, Sept. 26, 2023 /PRNewswire/ -- Netwrix, a cybersecurity vendor that makes data security easy, surveyed more than 1,600 IT and security professionals worldwide to reveal how their organizations reduce the financial impact of a data breach via a cyber insurance policy.

According to the survey, 44% of organizations are insured and 15% plan to purchase a policy within the next 12 months. Before being offered a policy, organizations typically need to go through a security audit by the prospective insurer.

"The insurer's audit will highlight security gaps in the IT ecosystem and provide recommendations on how to overcome them. In some cases, implementing additional security controls is mandatory to even qualify for a policy. In addition, some organizations choose to invest in more security measures because it reduces the cost of the insurance policy," says Dirk Schrader, VP of Security Research at Netwrix.

We asked respondents what requirements they had to meet in order to qualify for a policy. The most requested measure was multifactor authentication (MFA), named by 63%, followed by patch management (55%) and regular security training for business users (47%). In addition, 38% said they had to meet requirements for identity and access management (IAM), while 36% revealed they had to implement privileged access management (PAM) controls. Indeed, according to Gartner®, "Insurers often require organizations to deploy a PAM tool, along with MFA for administrative access, to mitigate the risk of breaches and malware events."⁽¹⁾

"When addressing the requirements or recommendations from an insurer, it is vital to assess the dependencies between the requested controls. For example, in order to require MFA for access to particular types of data, it is necessary to know where sensitive and regulated data resides, as well as to have control over user and administrative privileges," says Ilia Sotnikov, Security Strategist at Netwrix.

To learn more about security trends, check out the complete 2023 Hybrid Security Trends Report.

⁽¹⁾Gartner, Magic Quadrant for Privileged Access Management™, Felix Gaehtgens, James Hoover, Michael Kelley, Brian Guthrie, Abhyuday Data, 5 September 2023.

GARTNER is a registered trademark and service mark of Gartner and Magic Quadrant is a registered trademark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and are used herein with permission. All rights reserved.

About Netwrix

Netwrix makes data security easy. Since 2006, Netwrix solutions have been simplifying the lives of security professionals by enabling them to identify and protect sensitive data to reduce the risk of a breach, and to detect, respond to and recover from attacks, limiting their impact. More than 13,500 organizations worldwide rely on Netwrix solutions to strengthen their security and compliance posture across all three primary attack vectors: data, identity and infrastructure. 

For more information, visit www.netwrix.com. 

CONTACT:

Erin Jones
Avista PR for Netwrix
P: 704.664.2170
E: [email protected]

SOURCE Netwrix Corporation