82% of global insurers expect the rise in cyber insurance premiums to continue – Help Net Security

A Panaseer survey of global insurers across the UK and US found that 82% are expecting the rise in premiums to continue, with 74% of insurers agreeing that their inability to accurately understand a customer’s security posture is impacting price increases.

Insurers also see the increasing cost of ransomware as a leading factor (78%) affecting premium rises, with largest ransom pay-outs by insurers in the last two years averaging £3.26m in the UK and $3.52m in the US.

The cyber landscape is continuously evolving. Ransomware is now considered the greatest cyber threat to the UK, while the US was the most targeted region in 2021, accounting for 53% of all ransomware attacks globally. To help combat the ransomware crisis, researchers found that 87% of insurers want a consistent approach to analysing cyber risk, and 89% want direct access to customer security metrics and measures proving the status of security controls.

“Metrics and measures will absolutely have a bigger role in insurance. There is a new market developing where insurers will offer a reduction on pricing if you provide a quarterly report through a specific security platform, because they know it’s a good product that helps to improve cyber hygiene. It is likely we will see the old way of doing cyber insurance coming under pressure, as there are smaller, more agile organizations capable of doing more and offering support,” said Andreas Wuchner, a cybersecurity and risk expert and advisor to Panaseer.

As premiums have risen and policies have tightened over the last five years, The research found that it is now the manufacturing, financial services and healthcare industries that are making the most cyber insurance claims. The research also found that 40% of insurers across the UK and US believe that cloud security is the most important factor when assessing a potential customer’s security posture.

This is closely followed by security awareness (36%), along with application security (32%), vulnerability management (31%), privileged access management (31%) and patch management (30%), highlighting that insurers expect to see evidence of a layered, multi-faceted approach to cybersecurity.

“Unfortunately there are no optional security measures,” says Nik Whitfield, Chairman of Panaseer. “Insurers expect organizations to have good cyber hygiene across a broad spectrum of security areas, both on-premise and cloud environments, with the evidence to prove it. That’s why transparent data and security automation is so important, because it’s hard for any organization to be perfect at all these technical disciplines.”

Additional key findings from the research include: