The Cyber Solution for UK SMEs

THBGROUP.COM

CYBERAID+

The Cyber Security threat

Cyber Security is consistently one of the top three risks faced by UK businesses to ensure that adequate protection is in place.

The average cost of a security breach to a small SME, pre-GDPR, was £20,000 (approx) with worst-case incidents being much higher.

The GDPR (General Data Protection Regulation) in force from May 2018 places more requirements on organisations that handle personal data. With potential fines of up to 4% of global turnover or €20,000,000 and a mandatory requirement to notify the Information Commissioner’s Office of any data breach within 72-hours. This increases the potential for third-party claims and makes cyber security an urgent issue for all businesses. The Cyber threat is real and happening now – be prepared!

2

GDPR increases the urgency for firms to address cyber security.

High quality insurance cover plus superb day-to-day support.

3

The Cyber Solution for UK SMEs from THB UK Risk Solutions

CyberAid+ has been designed to offer UK SMEs an extensive and affordable Cyber solution.

CyberAid+ is an innovative approach to the UK Cyber and general risk management problem and we achieve this in 3 distinct ways:

EDUCATIONFREE Risk Management online training modules for you and your staff and further Computer-related support plus ongoing updates and cyber security tip

MITIGATIONValuable Cyber Essentials accreditation for your business – demonstrate that your business is compliant with the government-encouraged standard plus the opportunity to download and install MCRS Advanced protection for your business

REMEDIATIONInsurance and assistance for when you need it

1.

2.

3.

CYBERAID+ OVERVIEW

4

New Government statistics found that almost half of UK firms were hit by cyber breach or attack in the past year

Of those businesses experiencing a breach or attack, 37% are struck at least once a month

GDPR regulations mean new data-handling obligations for businesses with the potential for large fines

CyberAid+ could help!

KEY FACTS

• Fast cover - online quote and bind• Wide list of trade classes included• A+ Munich Re capacity• Wide cover and competitive premium from £150• Low excess• Can be embedded in existing schemes• 24/7 client helpline• Range of additional benefits to help protect your clients

KEY BENEFITS

FACTS AND FIGURES - THE CYBER THREAT

According to the recently released UK Government Cyber Security Breaches Survey 2017:

5

The Cyber Solution for UK SMEs from THB UK Risk Solutions

IDENTIFIED ONE BREACH OR ATTACK LAST YEAR

STAFF RECEIVING FRAUDULENT EMAILSFollowed by viruses and malware (33%), people impersonating the organisation online (27%) and ransomware (17%).

1500+ SURVEYED BUSINESSES

MOST COMMON BREACHES

46%

72% 9 in10

£20,000

TECHNICAL CONTROLS ARE IMPORTANT, with nine in ten businesses regularly updating their software and malware protections, configuring firewalls or securely backing up their data, but only around two thirds (69%) of companies setting guidance on acceptably strong passwords.

The average cost of a security breach to a small SME, pre-GDPR, was approximately

with worst-case incidents being much higher.

Breaches were often linked to HUMAN FACTORS, highlighting the importance of STAFF AWARENESS and VIGILANCE.

However, few businesses currently provide staff with cyber security training (20%) or have formal policies in this area (33%).

SOURCES (1) UK Government Cyber Security Breaches Survey 2017 published 19th April 2017. Available in full at https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2017; (2) Smallbusiness.co.uk article published 9th January 2017 and available in full at http://smallbusiness.co.uk/smes-targeted-cyber-criminals-2536150; (3) Information security breaches survey 2015, department for business, innovation & skills June 2015

6

High quality insurance cover plus superb day-to-day support

£200 FREE E-LEARNING FOR YOU AND YOUR EMPLOYEES

The cost-effective way to manage your safety risk! The Cardinus suite of e-learning courses offers a cost-effective and efficient way to support a powerful, results-driven risk management programme.

Courses include: Workstation Safety Plus, Fire Safety Plus, Safe Driving Plus, Manual Handling Plus (office and industrial editions), Managing Stress at Work, Environmental Essentials, Safety for Line Managers, Health and Safety Induction, Health and Safety Essentials, Security Awareness and Effective Risk Assessment.

FREE 30-CREDITS TOWARDS COMPUTING SUPPORT

Security, compliance and business efficiency in one package for a simple monthly fee. Your Cloud User Support Plan (CUSP) from Beyond The Clouds Solutions gives access to Cloud Office + Business Information Solutions helping you be part of Britain’s digital economy. Activate your account within 30 days of the policy start date and receive 30 complementary credits to spend on cloud education, support, services and products tailored to your individual needs.

£75 DISCOUNT ON THE COST OF CYBER ESSENTIALS ACCREDITATION

The Cyber Essentials scheme is a world-leading, costeffective assurance mechanism demonstrating to customers and other stakeholders that the most important basic cyber security controls have been implemented. It’s government-backed giving a baseline for cyber security that organisations in all sectors can use to show they’re fit for trade in our digital economy. The five Cyber Essentials key controls are Border firewall, Access control, Security control, Anti-Malware software and software patch management that, when implemented correctly, can prevent around 80% of Cyber-attacks. IT Governance are a leading CREST-accredited Cyber Essentials certification body, meaning that you will benefit from the added level of independent verification of your cyber security status provided by an external vulnerability scan.

FREE 24/7 HR HELPLINE FOR ALL EMPLOYMENT MATTERS

Avensure Ltd are a leading, outsourced Employment Law, HR and Employee Well-being company. They protect and support businesses and employers across the UK by ensuring their business is compliant with current employment law. They ensure those businesses have a complete HR solution through providing documentation, advice, guidance, training and preventative solutions that give businesses complete support with Employees including protection against Employment Tribunal claims.

FREE SINGLE USER LICENCE FOR THOUGHTHIVE’S ‘MANAGED CYBER RESILIENCE SERVICE - ADVANCED’ (MCRS - ADVANCED)*

Thoughthive’s premium managed cyber security service offers cost effective protection and resilience from cyber threats against your organisations endpoints. The service monitors your assets round-the-clock 24/7 allowing protection with minimal resources and incorporates world class products which automatically mitigate, remediate and protect against all types of cyber threats. The service bundles automated vulnerability management, incident management, asset management, threat protection, service continuity management, system compliance tracking and controls management. Thoughthive’s service is delivered via our autonomous Security Operation Centre providing high accuracy in escalation and response.

* Includes bitdefender antimalware protection

CLIENT BENEFIT SUMMARY CyberAid+

Insurance cover includes:

COMPUTER SYSTEM DAMAGE including Restoration / Virus Removal, Professional Assistance and Hardware Replacement (where required)

LOSS OF BUSINESS INCOME AND EXTRA COSTS

CYBER CRIME including Fraud / Telephone Hacking / Cyber Ransom

DATA BREACH EXPENSE including Professional Assistance / Notification Costs / Customer Support / Public Relations

CYBER LIABILITY including Data Privacy /Computer Virus Transmission / Defamation and Disparagement / Fines and Penalties (where insurable by law)

LOW policy excess

CyberAid+ also includes:

INCLUDED Thoughthive MCRS Advanced including BitDefender

FREE E-Learning from Cardinus Risk Management

FREE HR Helpline from Avensure Ltd

£75 DISCOUNT on Cyber Essentials Accreditation

FREE Credits for Computing Support

DISCOUNTED option to purchase Sonicwall hardware

7

The Cyber Solution for UK SMEs from THB UK Risk Solutions

NOTE – Cyber insurance, cover and claims are subject to policy terms and conditions including the requirement for a data back-up every 7-days, the use of up-to-date Antivirus software that is updated at least every 7-days and the use of a proprietary firewall – see the policy document for a full list of terms and conditions applicable.

8

OUR PARTNERS

9

The Cyber Solution for UK SMEs from THB UK Risk Solutions

OUR PROMISE

After calling the CyberAid+ insurance claim line, clients can expect:

BREACH

Same day response and appointment of specialist expertise (where required)

NOTIFICATION

Help to contain reputational damage, including assistance with notification of data subjects, regulators and other organisations who will need to be informed following a data breach

FORENSICS IT

Forensics and Data Recovery: what’s been affected, how can it be contained, repaired or restored

FINES AND INVESTIGATION

Professional preparation for any investigation, insurable fines, and penalties by a data protection regulator

LEGAL

Legal advice and defence following a data breach in the event of a legal liability claim relating to the breach, defamation, online intellectual property rights or transmission of malware to a third party

LIABILITIES

Defence costs for Data privacy, Computer virus transmission, and Defamation and disparagement

11

The Cyber Solution for UK SMEs from THB UK Risk Solutions

CyberAid+ SUMMARY

First and third-party Cyber Insurance protection available in a number of different policy limits to suit your requirements, please contact us for details

INCLUDED – Thoughthive’s MCRS Advanced Licence Government-grade security software (option to buy more licences)

FREE - £200 credit for online risk management training material

£75 DISCOUNT on the cost of CYBER ESSENTIALS accreditation for your business, making this an exceptionally cost effective option

FREE – 30 credits to our Cloud User Support Plan

FREE 24/7 HR Helpline for all employment matters

THBGROUP.COM

THB UK Risk Solutions is a trading name of Thompson Heath & Bond Limited, authorised and regulated by the Financial Conduct Authority, registered in England and Wales, company number 929224. CyberAid+ is a trading style of Brookfield Donovan Limited, authorised and regulated by the Financial Conduct Authority, registered in England and Wales, company number 9527224. Brookfield Donovan acts as an insurance scheme administrator under a Limited Binding Authority Agreement with HSB Engineering Insurance Limited, authorised and regulated by the Financial Conduct Authority, registered in England and Wales, company number 2396114. THB_CA+_05.18

CYBERAID+

THB CyberAid+

registration@cyberaidplus.co.uk

http://thb.cyberaidplus.co.uk/caplus

Since 1968 THB’s specialist broking teams have successfully delivered insurance and reinsurance cover to clients worldwide.

As part of the AmWINS Group, the largest wholesale broker in the United States, THB has more financial and market muscle than ever before. And with expertise, connections and a reputation for integrity built over five decades, that’s a powerful combination.

ABOUT THB Now celebrating our 50th year of broking, and with the support of AmWINS and its own 150 year vision, THB offers all the benefits of both heritage and future focus, big company resource and family firm attitude.

We strive for excellence with the aim of being your broker of choice.

THB UK RISK SOLUTIONS We combined the capabilities of our London Market and Peterborough operations under the banner of THB UK Risk Solutions to make available to all our UK brokers a broad choice of capacity plus a range of products, specialist schemes and exclusive arrangements. Our areas of expertise include Contractors’ Liability, Contractors’ All Risks, EL, PL, Motor Trade, Freight, Motor Fleet, HGV, Coach and Bus, Property Owners, Aviation Product/Premises Liability, Airport/Airside/Off-Airport Premises, Airside Liability, Professional Liability (including Brokers’ PI), Medical Malpractice, and Cyber Liability.