Ireland +353 14760030 / UK + 44 203 3931546

OA question: Would you drive your car without insurance?

We sincerely hope your reaction was a definite no. ย After all, itโ€™s a legal requirement to have cover, and on the roads, youโ€™re never quite sure what risks youโ€™ll face.

So hereโ€™s a second question. Would you trust a Managed Service Provider who didnโ€™t have cyber insurance cover?
Was that harder to answer? ๐ˆ๐ญ ๐ฌ๐ก๐จ๐ฎ๐ฅ๐๐งโ€™๐ญ ๐ก๐š๐ฏ๐ž ๐›๐ž๐ž๐ง. Not with the increasing prevalence of cyber threats, which can come from all sorts of angles and inflict irreparable damage on your business and your reputation.

Hereโ€™s another factor to think about. If a hacker wants to maximise damage or extort more ransomware payments, who better to target than an #MSP who looks after and has access to the systems of numerous businesses?

๐ƒ๐จ๐งโ€™๐ญ ๐š๐ฌ๐ฌ๐ฎ๐ฆ๐ž ๐ฒ๐จ๐ฎโ€™๐ซ๐ž ๐œ๐จ๐ฏ๐ž๐ซ๐ž๐

Thatโ€™s something weโ€™re well aware of and our insurance is squeaky clean, but with threats increasing, premiums rise. When we started talking about this issue with fellow MSPs, we discovered some donโ€™t have the right cover, some donโ€™t have enough and some, worryingly, donโ€™t have any at all.

While that might appear to be their problem, itโ€™s an issue for their clients too. What happens to you if theyโ€™re attacked? Would your insurance cover your losses? Is your business continuity guaranteed?
Donโ€™t get us wrong. Insurance doesnโ€™t magically prevent cyber attacks from happening โ€“ just as insuring your vehicle doesnโ€™t take every careless driver off the road. But itโ€™s part of the defence strategy. Whatโ€™s more, the savvy MSP who puts in place robust, accredited cyber-security measures will probably be able to find insurance policies for a more manageable premium. Insurance is a key part of a belt-and-braces approach.

๐€ ๐ฌ๐ข๐ฆ๐ฉ๐ฅ๐ž ๐ช๐ฎ๐ž๐ฌ๐ญ๐ข๐จ๐ง ๐š๐›๐จ๐ฎ๐ญ ๐š ๐œ๐จ๐ฆ๐ฉ๐ฅ๐ž๐ฑ ๐ฌ๐ฎ๐›๐ฃ๐ž๐œ๐ญ

Now, the details of cybersecurity insurance can be confusing. There are complications about who is covered: just the policy-holder, or third parties too โ€“ a particularly important consideration for MSPs looking after their clientsโ€™ IT ecosystems. Then some policies cover certain types of risk only, such as data breaches. Donโ€™t get too hung up on this right now. The first thing you need to ascertain is whether your MSP is putting you at risk by not having cyber insurance.
Ask that first question. Decide whether the response is convincing and complete or just a bit of waffle they hope will reassure.

If itโ€™s the latter, are you still happy to be motoring along with them?