What's Happening?

Facebook Twitter Youtube Linkedin

NEED HELP? QUESTIONS@FIA.ORG.ZA

become A FIA member TODAY
member login

Why cyber security insurance is crucial for risk mitigation

ARTICLE BY

  • Philippa Wild
  • Head: Commercial Underwriting
  • Santam

SHARE THIS POST

According to a recent Accenture study South Africa reportedly experiences 577 malware attacks per hour resulting in losses of R2.2 billion per year. Cybercrime is undoubtedly one of the most serious risks that businesses today face. In the past, many businesses, especially smaller ones, may have deprioritised cyber security insurance but now, with advancements in technology and the rise in remote work, it is a crucial part of any risk mitigation strategy.

Philippa Wild, Head: Commercial Underwriting from Santam says, “Cyber security is important for everyone with an online presence, more so for businesses with the responsibility to protect customers and their information. The ramifications of not having adequate cyber insurance can be severe. As businesses incorporate more e-commerce into their business models and grow their online presence, it becomes increasingly important to be protected from cyber criminals.”

Why should businesses care about cyber insurance?

One great advantage of having cyber insurance is that it enables a business to bounce back from specific business interruptions and financial losses incurred because of cybercrime. Cyber insurance also helps with the practical side of getting IT experts to restore systems, recreate data and pre-empt new threats. Cyberattacks can result in:

  • Liability for accidental loss of data.
  • Liability for loss of data and its consequences by deliberate, dishonest, negligent, and fraudulent means.
  • Accidental damage caused by computer-driven property or equipment.
  • Loss or damage caused by failures or computer malfunction.
  • Loss, damage, and liability caused by algorithmic errors and malfunction.
  • Loss of intellectual property, reputation, and business opportunities.

Insurance can help protect a business against these risks. The insurance contract will contain all the necessary details for a client to understand how and to what extent they are protected in the event of a cyber attach.

Which businesses are most at risk?

The simplest answer is that any business that has any kind of online presence or stores customer data should invest in cyber insurance, but this is especially true for businesses that do the following:

  • Storage of credit-card data: You could be exposed to security breaches in terms of your customers’ confidential information, running the risk of liabilities occurring from breach of their privacy.
  • Storage or processing of sensitive third-party data: You could have contractual liability if third-party data is leaked, in addition to harming the brand’s reputation.
  • Uses a transactional and interactive website/e-commerce platform: This means you could face regulatory penalties if a breach were to occur.
  • Using a cloud service provider to store sensitive information: You could be held accountable for any information lost during a breach of the system.

How to protect yourself:

Most importantly one needs to have a holistic risk mitigation strategy in place and take proactive steps to minimise the chances of a cyber-attack. This is called maintaining good digital hygiene. Employee education is key to this and taking these steps will help keep all stakeholders protected:

  • Understand your password philosophy and minimum requirements.
  • Recognise the signs of phishing.
  • Look for signs of suspicious behaviour on their laptops and other devices.
  • Monitor for unusual sounds on devices, such as clicks and unexplained static.
  • Although IT departments can provide technical assistance, employees should be encouraged to take an active and empowered role in watching videos, attending seminars, and attending awareness programmes set up by their organisations.

Thereafter, ensuring that you have adequate insurance is an important step in shielding your business from the impact of a cyber-attack.

Wild concludes, “Knowledge is power when it comes to matters of cyber security. Equip yourself as a business and protect and empower your people with the peace of mind that comes from cyber insurance.”

Subscriber Terms and Conditions

  1. APPLICATION OF TERMS
    • These terms and conditions (“Subscriber Terms”) apply to the subscription by any qualifying member of the South African Underwriting Managers Association NPC (“SAUMA”) to the services and benefits offered by FIA Services (Pty) Ltd (“FIA Services”) under the SAUMA affiliation arrangement (“Subscription”).

  2. NATURE OF SUBSCRIPTION
    • A Subscription under this arrangement:
      • does not constitute membership of FIA NPC;
      • does not confer any voting rights or governance participation in FIA NPC; and
      • is governed solely by the contractual relationship between the Subscriber and FIA Services.

  1. ELIGIBILITY
    • To qualify for the Subscription, the applicant must, at the time of application, be a current paid-up member of SAUMA.
    • FIA Services will verify the applicant’s SAUMA membership status with SAUMA prior to activation, and may re-verify such status periodically.
    • If a Subscriber ceases to be a paid-up member of SAUMA, the Subscription will correspondingly be terminated.
    • Applicants are required to authorise FIA Services to confirm their SAUMA membership status with SAUMA as part of the application process.

  1. SERVICES
    • The Subscription entitles the Subscriber to the following benefits:
      • Complimentary access to the FIA CPD Platform;
      • Complimentary access to the FIA Insight Magazine (digital edition);
      • Advertising opportunities on FIA platforms at a discounted rate of 15% (fifteen percent) off the prevailing published rates; and
      • Invitations to attend FIA Technical Webinars annually.
    • FIA Services reserves the right to update, vary or substitute the Services from time to time, provided that the overall value and nature of the benefits remain materially the same.

  1. FEES AND PAYMENT
    • The monthly subscription fee is R260.00 (two hundred and sixty rand) for up to seven registered individuals (Key Individuals and Representatives), and R36.00 (thirty-six rand) per additional registered individual thereafter, excluding VAT.
    • The Subscriber shall provide FIA Services with the required details of each individual to be registered under the Subscription for the purposes of activation and billing.
    • All fees are exclusive of VAT, which shall be charged at the prevailing statutory rate.
    • Subscription fees are reviewed annually in March and may be adjusted with effect from 1 April.
    • Any changes to the Subscription, including but not limited to the number of Representatives and Key Individuals registered under the Subscription, may only be effected once annually during the annual review period in March of each year, with such changes taking effect from 1 April.
    • Subscription fees shall be billed monthly in arrears, unless the Subscriber elects an annual billing cycle at the time of application.
    • The Subscriber shall ensure that all billing information (including contact details, authorised signatories and bank account details) is kept accurate and up to date.
    • Non-payment of subscription fees may result in suspension of access to the Services until such fees are brought up to date.
    • The Subscriber acknowledges and agrees that all subscription fees payable under these Subscriber Terms may be collected by way of debit order, which shall be processed by the holding company, FIA NPC (The Financial Intermediary Association of South Africa), on behalf of FIA Services. Payment to FIA NPC shall be deemed to constitute valid and sufficient discharge of the Subscriber’s payment obligations to FIA Services under these Subscriber Terms.

  1. ONBOARDING
    • Onboarding will be conducted as a Subscription with FIA Services under the SAUMA affiliation arrangement.
    • Onboarding will not confer FIA NPC membership status or any associated rights.
    • Onboarding is conditional on confirmation of the Subscriber’s current SAUMA membership at the time of application

  1. DATA PROTECTION
    • FIA Services will process all personal information in accordance with the Protection of Personal Information Act 4 of 2013 (POPIA) as set out in our POPIA policies.
    • By subscribing, the Subscriber authorises FIA Services to confirm their SAUMA membership status with SAUMA and to process personal information for the purposes of fulfilling the Subscription.

  1. TERMINATION
    • The Subscriber may terminate the Subscription by giving FIA Services one calendar month’s written notice.
    • FIA Services may terminate the Subscription on one calendar month’s written notice, or immediately if the Subscriber breaches these Subscriber Terms and fails to remedy such breach within 14 (fourteen) days of receiving written notice.
    • Termination of the SAUMA–FIA Services affiliation agreement shall not automatically terminate these Subscriber Terms.
    • Termination by the Subscriber shall not relieve the Subscriber of liability for any subscription fees accrued up to the effective date of termination.
    • FIA Services may suspend or terminate the Subscription with immediate effect in the event of non-payment of fees by the Subscriber.

  1. GENERAL
    • These Subscriber Terms are governed by the laws of the Republic of South Africa.
    • Any disputes arising under these Subscriber Terms shall be dealt with in accordance with the dispute resolution provisions contained in the FIA NPC membership terms and conditions, as modified to reflect that the contractual relationship is with FIA Services.
    • Any notices required under these Subscriber Terms may be validly delivered by email to the addresses provided in the Subscriber’s application form, and such notices shall be deemed received on the day of transmission if sent during business hours.
    • The Subscriber may not assign, cede or transfer any of its rights or obligations under these Subscriber Terms without the prior written consent of FIA Services.
    • No variation of these Subscriber Terms shall be of any force or effect unless reduced to writing and signed by both FIA Services and the Subscriber.