Cyber Risk Recent Trends and Insurance Considerations March 2015 .

37
Cyber Risk Recent Trends and Insurance Considerations March 2015 www.pwc.com

Transcript of Cyber Risk Recent Trends and Insurance Considerations March 2015 .

Page 1: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

Cyber RiskRecent Trends and Insurance Considerations

March 2015

www.pwc.com

Page 2: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 2March 2015Cyber Risk – Recent Trends and Insurance Considerations

Page 3: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 3

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Page 4: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 4

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Page 5: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 5

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Page 6: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 6

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Page 7: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

Cyber Risk – Recent Trends and Insurance Considerations PwC 7

Agenda

• Notable Cyber Attacks

• Regulatory Responses to Attacks

• Cyber Insurance

• Claims Handling Considerations

• Lessons Learned

March 2015

Page 8: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

8PwC

Section 1

Notable Cyber Attacks

Cyber Risk - – Recent Trends and Insurance Considerations March 2015

Page 9: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 9

mafiaboy

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Notable Cyber Attacks

Page 10: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 10

Sony Playstation Data Breach

Cyber Risk – Recent Trends and Insurance Considerations

Kristopher Johns et al (Plaintiff)

vs

Sony Computer Electronic Entertainment America LLP et

al (Defendant)

Class Action

March 2015

Notable Cyber Attacks

Page 11: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 11

New York Times Website Attack

Cyber Risk – Recent Trends and Insurance Considerations

Notable Cyber Attacks

March 2015

Page 12: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 12

Target Cyber Attack

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Notable Cyber Attacks

Page 13: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 13

Sony pictures Attack

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Notable Cyber Attacks

Page 14: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 14

Anthem data breach

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Notable Cyber Attacks

Page 15: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

Cyber RiskPwC 15

Cisco 2014 Annual Security Report

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Notable Cyber Attacks

Page 16: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

16PwC

Section 2

Regulatory Responses to Cyber Attacks

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Page 17: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 17

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Regulatory Responses to Cyber Attacks

Page 18: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 18

NIST Cybersecurity Framework

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Regulatory Responses to Cyber Attacks

Page 19: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 19

Federal and state regulations

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Regulatory Responses to Cyber Attacks

Page 20: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 20

Federal and state regulations

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Regulatory Responses to Cyber Attacks

Page 21: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

Cyber Risk – Recent Trends and Insurance Considerations 21PwC

Section 3

Cyber Insurance

March 2015

Page 22: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 22

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Cyber Insurance

Page 23: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 23

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations

New Data Breach Exclusions & Endorsements

This insurance does not apply to:

Access Or Disclosure Of Confidential Or Personal Information

“Personal and advertising injury” arising out of any access to or disclosure of any person’s or organization's confidential or personal information, including patents, trade secrets, processing methods, customer lists, financial information, credit card information, health information or any other type of non public information.

This exclusion applies even if damages are claimed for notification costs, credit monitoring expenses, forensic expenses, public relations expenses or any other loss, cost or expense incurred by you or others arising out of any access to or disclosure of any person's or organization's confidential or personal information.

March 2015

Cyber Insurance

Page 24: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 24

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations

Notable Coverage DecisionsMarch 2015

Cyber Insurance

Notable Coverage Decisions

Page 25: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 25

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Cyber Insurance

What about D&O

Page 26: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 26

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations March 2015

What about D&O… Maybe??

Cyber Insurance

Page 27: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 27

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations

Cyber Insurance

March 2015

Cyber Insurance

Cyber Risk Policies

Page 28: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 28

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Cyber Insurance

Cyber Liability – First Party Policies

Page 29: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 29

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Cyber Insurance

Cyber Liability – Third Party Policies

Page 30: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 30

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Cyber Insurance

Cyber Risk Policies

Page 31: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

Cyber Risk - Recent Trends and Insurance Considerations31PwC

Section 4

Claim Handling Consideration

March 2015

Page 32: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 32

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Beware of Clouds

Claim Handling Considerations

Page 33: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

PwC 33

Cyber Insurance

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Future Trends

Claim Handling Considerations

Page 34: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

Cyber Risk - Recent Trends and Insurance Considerations34PwC

Section 5

Lessons Learned

March 2015

Page 35: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

35PwC

Cyber Risk – Recent Trends and Insurance Considerations

• Notable Cyber Attacks

• Regulatory Responses to Attacks

• Cyber Insurance

• Claims Handling Considerations

March 2015

Lessons Learned

Page 36: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

36PwC

Cyber Risk – Recent Trends and Insurance Considerations March 2015

Lessons Learned

Page 37: Cyber Risk Recent Trends and Insurance Considerations March 2015 .

Thank You

This publication has been prepared for general guidance on matters of interest only, and does not constitute professional advice. You should not act upon the information contained in this publication without obtaining specific professional advice. No representation or warranty (express or implied) is given as to the accuracy or completeness of the information contained in this publication, and, to the extent permitted by law, PricewaterhouseCoopers LLP, its members, employees and agents do not accept or assume any liability, responsibility or duty of care for any consequences of you or anyone else acting, or refraining to act, in reliance on the information contained in this publication or for any decision based on it.

© 2015 PricewaterhouseCoopers LLP. All rights reserved. In this document, “PwC” refers to PricewaterhouseCoopers LLP which is a member firm of PricewaterhouseCoopers International Limited, each member firm of which is a separate legal entity.