Insurance companies are facing increasing challenges in assessing and pricing cyber risk. This is due to the ever-evolving nature of cyber threats, the lack of standardised risk assessment methodologies, and the difficulty in obtaining complete and accurate data from clients.

Insurance companies can improve their ability to assess and price cyber risk by implementing a more comprehensive, and risk-based approach. This is how lnfoprotect have helped smooth the process from risk capture to placement, the client in this case was a large UK motor dealership.

Motor dealerships, like many businesses, face growing cybersecurity threats and vulnerabilities. With increasing reliance on digital systems critical to the dealership’s operations, finances, and customer trust, the risk of cyberattacks, data breaches, and operational disruptions presents a real and business-ending threat.

Given the high-risk nature of the motor trade industry, the dealership faced rigorous terms and prerequisites in order to obtain cyber insurance coverage. Despite these challenges, the motor dealership recognised the importance of cyber insurance as a vital element of their risk management strategy, a view shared by their broker who was determined to get a better deal for their client.

THE PROBLEM: In order to obtain cyber insurance, the motor dealership needed to demonstrate its cyber security maturity and that the risks had been identified and removed.

Obtaining cyber insurance at an economical rate was crucial for the dealership to strike a balance between comprehensive coverage and cost-effectiveness.

Historically, clients are asked to complete a lengthy physical or digital proposal form. Firstly, reliance on proposal forms is deeply embedded in the insurance process, however, this is problematic because the client (and to some extent broker) has no visibility of the purpose or accuracy of the responses given. Some probably never see the light of day again.

Secondly, there is a lack of a standardised approach to assessing an organisation’s cyber risk profile, each proposal form is different and if the broker is approaching more than one insurer, there can be multiple forms, taking weeks to complete. Insurers and underwriters often struggle to accurately quantify the risks associated with a specific business, leading to higher premiums or limited coverage.

Additionally, the motor dealership faced difficulty in finding an insurance policy that met its specific needs, given the unique characteristics of the automotive industry and associated cyber risks.

A game-changing solution for insurers.

Fortunately, their broker wasn’t going to rest until every avenue had been explored. What was needed was a more holistic approach, that would bring together the client, broker, lnfoprotect and underwriter presenting them all with a detailed and exact picture of the cyber position of the client, a detailed gap analysis of the dealership’s IT infrastructure, security controls, data protection practices, and potential vulnerabilities.

The Details:

The FortMesa platform is utilised by Infoprotect for Cyber Risk Assessments of this nature and requires the right control set (CIS, N 1ST etc.) to be selected, based on the type of business, the industry it operates in and the desired objective. The Centre for Internet Security, Implementation Group 2 (CIS VB IG2) framework was selected based on the above and further refined by using lnfoprotect’s Security Profile Plans. The cyber risk assessment provided a clear understanding of the dealership’s cyber risk maturity, including the likelihood and potential impact of various threats.

By leveraging the findings and recommendations of the assessment, the insurance broker was able to present an accurate and evidence-based risk profile to potential cyber insurers. This enabled the insurers to assess the dealership’s risk posture more accurately, resulting in competitive premiums and comprehensive coverage tailored to its specific needs.

The insurer said “We are very impressed with your assessment…and the underwriter would be very glad to see more risk presentations in this style. The approach and the methodology taken have been approved, and the underwriter agrees with your findings.”

Successful Conclusion and Comprehensive Cover:

As a result of the proactive cyber risk assessment, the motor dealership secured comprehensive cyber insurance coverage aligned with its risk profile and business requirements. This approach created competition in the insurance market, enabling the client to buy twice the cover offered previously on significantly improved terms, and at 60% of the premium.

The insurance policy covers a wide range of cyber risks, including data breaches, ransomware attacks, business interruption, and third-party liabilities. It also includes valuable benefits such as incident response services, cyber forensics, and legal support, enabling the dealership to respond effectively to cyber incidents. This comprehensive coverage at an economical rate enhances the dealership’s cybersecurity posture, meets regulatory requirements, and strengthens customer trust.

The comprehensive coverage at an economical rate enables the motor dealership to mitigate cyber risks, meet regulatory requirements, bolster customer trust, and enhance its overall cybersecurity posture. The cost-effective premiums ensure that the insurance solution aligns with the motor dealership’s financial goals and does not strain its resources.

A win-win situation:

In conclusion, the motor dealership’s proactive approach to utilising lnfoprotect’s cyber risk assessment for insurance procurement not only provided comprehensive protection but also facilitated cost-effective cover. By introducing the cybersecurity expertise of lnfoprotect and its tailored assessments, the dealership has mitigated cyber risks, ensuring the continuity of its operations and financial stability. This case study perfectly illustrates the value of a comprehensive cyber risk management strategy, ensuring business resilience in the face of evolving cyber threats, and the value of a quadripartite relationship to deliver the best results for everyone involved.

By working with lnfoprotect insurance brokers and insurers can improve their ability to assess and price cyber risk, which will ultimately benefit both themselves and their customers.

Your business deserves the
best solutions

To find out more about how lnfoprotect UK’s unique risk profiling system can transform the buying journey, making cyber insurance not just accessible but economical, drop Brad Fraser a line on 07940 106 158 or at brad.fraser@infoprotect.co.uk.

Contact our team