How much Cyber Insurance is enough? If, like us, you think that paying more will guarantee greater safety then you may well be right.

I put an emphasis on may, because cyber coverage is still largely unknown by consumers and difficult to place by underwriters.

If, as an organisation, you do not know how to identify your own threat risks, then can you really trust your insurers?

Broadly-speaking, there are three broad areas most companies would consider cyber insurance for:

The Network and Information Security (NIS) Directive is intended to create a base level of security for organisations that are operating essential services within the EU. 

The legislation came in on 6 July 2016 and became enforceable from 10 May 2018. The main sectors covered are energy providers, transport, banking, financial services infrastructure, health, water and digital infrastructure providers. 

Organisations who operate within these sectors are termed “operators of essential services” and must implement the provisions of the directive to form the required base level of security for those services.