
Cyber insurance – can you really live without it?
Some of the world’s largest technology companies have been hacked to exploit them for financial or other gain, as a protest against the services they offer or to damage their reputation. Even these technological bastions have been unable to protect themselves from a concerted hostile attack. One might reason that high profile targets would attract a level of hacking resources that are unlikely to be brought to bear against a provincial solicitor but this might not be the case.
Sophisticated hacking tools are almost distributed as commodities these days through commercial websites and hackers’ clubs. Their availability, coupled with an expert human resource pool spread across the globe, perhaps even in jurisdictions that represent a haven for cyber criminals, means that it’s now cost effective for even the smallest commercial target to be subjected to sophisticated hacking techniques. Indeed, smaller organisations are now actively targeted by cyber criminals as they tend to be less secure and the hacking process can be automated allowing criminals to bulk hack.
The Solicitors Regulation Authority (SRA) has warned that "law firm client accounts are being targeted and solicitors and their clients are suffering disruption and potential loss. It is essential that firms understand the risks and take precautions to avoid falling victim to these attacks”.
“This is an issue that is not going away. This is obvious not just from the reports we are receiving direct from law firms and members of the public, but also in our discussions with local law societies."
The SRA has “warned repeatedly against the threat of cybercrime since it was first highlighted in its Risk Outlook spring update”.
“The risk has not eased, however, and criminals are using increasingly sophisticated methods to obtain money or sensitive information fraudulently.”
The prize for successfully compromising a firm’s client account is all too obvious. We must also bear in mind that solicitors hold extremely sensitive and confidential information and, as such, the legal profession has been identified in global surveys as a prime target.
What would you do if your firm was the subject of a successful cyber-attack? How would you cope with the technological, regulatory and commercial pressures your firm would be subjected to?
Cyber insurance products have been developed by some insurers specifically for the legal profession. As well as providing insurance coverage for exposures that are outside other insurance policies such as Professional Indemnity and Office Insurance, the more sophisticated cyber insurance products provide a comprehensive and “hands-on” breach management service in the event of a data breach.
Using experts in their respective fields, breach management can offer advice, assistance and guidance to ensure that: -
Some insurers are also able to advise on data breach prevention and planning to reduce the risk of an incident and to ensure your firm’s readiness to respond should a breach occur.
Benjamin Disraeli famously said “I am prepared for the worst, but hope for the best”. Cyber-crime is a real and persistent feature on the legal profession’s risk landscape so it’s probably time you prepared for the worst.
For more information about available Cyber Liability insurance, please contact your Client Manager. Marco D’Ovidio, Associate Director, Aon UK Limited on 0117 948 5116
FP.PSG.1468.CM
Sources
Solicitors Regulation Authority (June 2015) (SRA)
RPC ReSecure brochure
Aon cyber promotional letter
