What's Happening?

Facebook Twitter Youtube Linkedin

NEED HELP? QUESTIONS@FIA.ORG.ZA

become A FIA member TODAY
member login

Et tu, Toaster?

ARTICLE BY

  • Christelle Colman

SHARE THIS POST

The views in the articles below are not necessarily those of the FIA

 

The Internet of Things (IoT) is a term with which we are becoming increasingly familiar. It refers to the interconnection of computing devices and sensors embedded in everyday objects, in order to send and receive data. While these have the potential to greatly increase convenience in everyday life, IoT enabled appliances can also betray their owners.  

For most of us, this conjures up images of a distant future with self-stocking fridges and toasters that intuitively know when you are hungry. However, first generation IoT objects are very much a part of everyday life, and the risk landscape is already changing as a result.

The first example that comes to mind is the user data published by Strava, an app that connects to smartphones and fitness trackers like Fitbit to show popular running routes in major cities. In November of 2017, Strava made its “heat map” available online, showing the running and cycling routes of literally millions of users.

What the developers of the app did not anticipate, was that the heat map also revealed the locations of several secret military bases. What’s more, the layouts of these bases were clearly mapped out by the jogging routes of military personnel with fitness trackers.

Closer to home, the growing number of IoT enabled devices being introduced into daily life are presenting insurance challenges that your client needs to be aware of. The potential risks are especially relevant to the high-net-worth (HNW) market, since these individuals are generally known for being early adopters of high tech appliances and wearables that can connect to smart devices and online resources. Additionally, HNW individuals often install high-tech security measures that can be monitored remotely, in their luxury homes.

To start, as IoT becomes more widespread, the potential for cyberattacks increase significantly. According to cybersecurity firm, Kaspersky, attacks on IoT devices increased threefold in the first half of 2018 alone.  This is because the security on most IoT devices is still considered to be relatively weak in the face of ever-evolving cyber risks.

Ransomware attackers now have one more medium to extort money from victims, with attackers taking to disabling a connected device at crucial moments when they cannot be reset or disconnected.  For example, a ransomware attack could shut down a home’s air-conditioning or security system while the owners are away on holiday, unless a ransom is paid.

This is, however, not the most common form of cyberattack on privately owned devices. Taking control of connected IoT devices in order to mine cryptocurrency or to create a network of co-opted devices for illicit purposes, are on the rise. Not only does this shorten the life of the device, but it can also significantly increase energy consumption and connectivity in the client’s home.

Still, individuals face an even bigger risk to their assets, as well as to their personal safety. Wearable tech, sensors in vehicles, and location-based sensors in home appliances and security systems all collect vast amounts of data about the users. Everything from personal preferences to daily and weekly routines is collected and the data is stored on cloud servers or “smart devices” that are connected online. It has also been demonstrated on numerous occasions that connected home security cameras can be hacked with surprisingly little effort.

This means criminals could potentially predict an individual’s movements, zero in on their current location, or analyse their habits in order to identify opportunities. For your clients it could mean that criminals know when (or how) to break in.

On a home contents cover policy, this may even present some significant challenges at claims stage. A theft where criminals may have known how to deactivate security systems and cameras, or knew exactly where to enter the property, may rouse the suspicions of an insurer and could even lead to the claim being repudiated.

For HNW individuals, it could even be used by criminals to find a window of opportunity to stage a kidnapping.

With this in mind, brokers have to start talking to their clients about the risks of IoT devices. While most devices do not have adequate security in place, it is crucial that the client’s home-based routers and networks are equipped and maintained with the right level of security software, and that passwords are regularly updated.

Your clients also need to remain cognisant of the fact that IoT devices are constantly collecting user data. Clients need to become much more selective about the kind of data that is collected about them, as well as when and where their IoT enabled devices are allowed access to the internet.

Subscriber Terms and Conditions

  1. APPLICATION OF TERMS
    • These terms and conditions (“Subscriber Terms”) apply to the subscription by any qualifying member of the South African Underwriting Managers Association NPC (“SAUMA”) to the services and benefits offered by FIA Services (Pty) Ltd (“FIA Services”) under the SAUMA affiliation arrangement (“Subscription”).

  2. NATURE OF SUBSCRIPTION
    • A Subscription under this arrangement:
      • does not constitute membership of FIA NPC;
      • does not confer any voting rights or governance participation in FIA NPC; and
      • is governed solely by the contractual relationship between the Subscriber and FIA Services.

  1. ELIGIBILITY
    • To qualify for the Subscription, the applicant must, at the time of application, be a current paid-up member of SAUMA.
    • FIA Services will verify the applicant’s SAUMA membership status with SAUMA prior to activation, and may re-verify such status periodically.
    • If a Subscriber ceases to be a paid-up member of SAUMA, the Subscription will correspondingly be terminated.
    • Applicants are required to authorise FIA Services to confirm their SAUMA membership status with SAUMA as part of the application process.

  1. SERVICES
    • The Subscription entitles the Subscriber to the following benefits:
      • Complimentary access to the FIA CPD Platform;
      • Complimentary access to the FIA Insight Magazine (digital edition);
      • Advertising opportunities on FIA platforms at a discounted rate of 15% (fifteen percent) off the prevailing published rates; and
      • Invitations to attend FIA Technical Webinars annually.
    • FIA Services reserves the right to update, vary or substitute the Services from time to time, provided that the overall value and nature of the benefits remain materially the same.

  1. FEES AND PAYMENT
    • The monthly subscription fee is R260.00 (two hundred and sixty rand) for up to seven registered individuals (Key Individuals and Representatives), and R36.00 (thirty-six rand) per additional registered individual thereafter, excluding VAT.
    • The Subscriber shall provide FIA Services with the required details of each individual to be registered under the Subscription for the purposes of activation and billing.
    • All fees are exclusive of VAT, which shall be charged at the prevailing statutory rate.
    • Subscription fees are reviewed annually in March and may be adjusted with effect from 1 April.
    • Any changes to the Subscription, including but not limited to the number of Representatives and Key Individuals registered under the Subscription, may only be effected once annually during the annual review period in March of each year, with such changes taking effect from 1 April.
    • Subscription fees shall be billed monthly in arrears, unless the Subscriber elects an annual billing cycle at the time of application.
    • The Subscriber shall ensure that all billing information (including contact details, authorised signatories and bank account details) is kept accurate and up to date.
    • Non-payment of subscription fees may result in suspension of access to the Services until such fees are brought up to date.
    • The Subscriber acknowledges and agrees that all subscription fees payable under these Subscriber Terms may be collected by way of debit order, which shall be processed by the holding company, FIA NPC (The Financial Intermediary Association of South Africa), on behalf of FIA Services. Payment to FIA NPC shall be deemed to constitute valid and sufficient discharge of the Subscriber’s payment obligations to FIA Services under these Subscriber Terms.

  1. ONBOARDING
    • Onboarding will be conducted as a Subscription with FIA Services under the SAUMA affiliation arrangement.
    • Onboarding will not confer FIA NPC membership status or any associated rights.
    • Onboarding is conditional on confirmation of the Subscriber’s current SAUMA membership at the time of application

  1. DATA PROTECTION
    • FIA Services will process all personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) as set out in our POPIA policies.
    • By subscribing, the Subscriber authorises FIA Services to confirm their SAUMA membership status with SAUMA and to process personal information for the purposes of fulfilling the Subscription.

  1. TERMINATION
    • The Subscriber may terminate the Subscription by giving FIA Services one calendar month’s written notice.
    • FIA Services may terminate the Subscription on one calendar month’s written notice, or immediately if the Subscriber breaches these Subscriber Terms and fails to remedy such breach within 14 (fourteen) days of receiving written notice.
    • Termination of the SAUMA–FIA Services affiliation agreement shall not automatically terminate these Subscriber Terms.
    • Termination by the Subscriber shall not relieve the Subscriber of liability for any subscription fees accrued up to the effective date of termination.
    • FIA Services may suspend or terminate the Subscription with immediate effect in the event of non-payment of fees by the Subscriber.

  1. GENERAL
    • These Subscriber Terms are governed by the laws of the Republic of South Africa.
    • Any disputes arising under these Subscriber Terms shall be dealt with in accordance with the dispute resolution provisions contained in the FIA NPC membership terms and conditions, as modified to reflect that the contractual relationship is with FIA Services.
    • Any notices required under these Subscriber Terms may be validly delivered by email to the addresses provided in the Subscriber’s application form, and such notices shall be deemed received on the day of transmission if sent during business hours.
    • The Subscriber may not assign, cede or transfer any of its rights or obligations under these Subscriber Terms without the prior written consent of FIA Services.
    • No variation of these Subscriber Terms shall be of any force or effect unless reduced to writing and signed by both FIA Services and the Subscriber.