Recent news of cyber attacks carried out by a “sophisticated State-based cyber actor” on a range of Australian public and private-sector organisations has been hard to miss of late. Despite persistent attacks - and considerable media coverage - no major data breaches were officially recorded. Unfortunately, Toll Group and Lion Australia are just two recent examples of high-profile victims who have suffered data breaches from ransomware attacks, with losses creeping into the millions.
While the threat of cyber attacks and network security breaches is nothing new, the pace at which such risks are changing, is exponential. Cyber crime is growing at breakneck speed, as is the sophistication of its arsenal. According to Scamwatch, Australians lost over $630 million to scams in 2019, with business email compromise scams (social engineering fraud) hitting us hardest, with costs amounting to $132 million.
The decision by PM Scott Morrison to announce recent cyber attacks is testament to the scale and severity of such threats. The risks to Australian individuals and organisations have never been higher - the time for complacency is at an end.
While the prevalence of cyber crime can be overwhelming, some powerful response initiatives are underway. To mitigate an explosion in online malware, ransomware and phishing attacks, Telstra has been investing millions into Cleaner Pipes - a broadscale cyber security effort to combat this alarming trend. In the world of insurance data, this trend is manifesting via an increase in volume and severity of claims.
At Government level, a Federal 2020 Cyber Security Strategy (CSS) - an update to the 2016 version - is underway. It is anticipated the CSS will set cyber security benchmarks across all industries and sectors; likely in the form of a Code of Conduct, with a Regulator installed to monitor compliance.
Robust risk protection requires a company-wide effort, with direction from the top. Failure to properly prepare for, and prevent, a network security breach could be deemed a failure of a Director’s duty, with the potential of exposing the business to Directors & Officers Liability claims or other civil liability claims against the organisation.
Numerous resources are available to support organisations to identify, understand and manage their cyber risks, so much so, it can often be overwhelming. At Honan, we’re available to play the role of outsourced risk manager; working with you to identify and manage risks through insurance risk transfer and/or other mitigation strategies. In the case of cyber risk, we facilitate a partnership with an Insurer and provide a range of risk management strategies, including:
To help you understand your organisation’s cyber risk management plan, we’ve prepared a simple Honan Cyber Risk Checklist focusing on 3 key areas:
1) Understanding Your Cyber Risk
2) Your Cyber Risk Strategy
3) Network Security Infrastructure.
For more information or advice on managing your cyber risk strategy, please reach out at any time.
Head of Professional and Executive Risks
Head of Client Service (NSW) – Corporate Insurance & Risk Solutions
dominic.brettell@honan.com.au
Sales and Service Manager - Western Australia