State of the Insurance Market

Recommendations

We recommend starting the renewal process 150 days prior to expiration and having a constant dialogue with your broker throughout the year. Clients with better controls, policies, and procedures are receiving preferred rates, and those without may be declined. Implementing the following could help with securing renewals and keeping rate increases to a minimum:

• Multi-factor authentication (MFA) for remote access and privileged accounts. MFA uses a two or more-authentication verification system to give users access to accounts, applications, VPNs, and more. MFA goes beyond a username and password for additional verification, mitigating cyber threats.
• Endpoint detection and response (EDR) provides real-time visibility across all endpoint activity by detecting red flags such as malicious behavior. Additionally, it can analyze endpoint data and respond to threats.
• Security training to help employees recognize common cyber threats, such as phishing scams, social engineering, poor password hygiene, and other risks.
• Frequent, secured, encrypted, and tested backups for important records and data to be stored offsite, including business contracts and licenses, meetings, patents, trademarks, shareholder stock records, and all important documents.
• Privileged access management (PAM) to mitigate the risk of privileged access. The core capabilities of PAM include discovery of privileged accounts across multiple systems, infrastructure, and applications; credential management for privileged accounts; credential vaulting and control of access to privileged accounts.
• Email filtering and web security to eliminate spam. This basic, but important, filtering system should be seen as a foundation of cybersecurity, analyzing emails for phishing and other red flags, and dumping them into a separate folder.
• Patch management and vulnerability management in tandem, to unveil and prioritize risks based on their individual threat level, as well as amending said risks by automatically upgrading software to its most recent version.
• Incident response plans to allow an organization’s IT team to detect any red flags and provide the time necessary to respond and recover from incidents, such as service outages, cyberattacks, or data loss.