Companies are finally increasing their cybersecurity protection — to get better insurance

A computer being guarded by cybersecurity.
(Image credit: iStock)

Businesses are finally improving their cybersecurity stances, just not necessarily for the right reasons, new research from Sophos has found.

With cyber threats becoming increasingly prevalent amid global geopolitical tensions, Sophos claims many companies are looking to up their protection in order to get better insurance premiums, indicating that they’re very much worried about the present and not the future.

However, it’s not a bad thing, because according to its ‘Cyber Insurance and Cyber Defenses 2024: Lessons from IT and Cybersecurity Leaders’ report, 97% of organizations with cyber insurance have invested in improving their defenses.

Companies are only investing in cybersecurity for better insurance

Of the 97% that increased investment, three-quarters (76%) did so to qualify for coverage. Two-thirds (67%) said that they’d invested in order to obtain better insurance pricing, with one-third (30%) citing improved policy terms as a result.

Despite the positive trend, recovery costs from cyberattacks continue to surpass insurance coverage. A worrying 1% of claimants reported that their insurer covered all remediation costs, primarily because the expenses exceeded policy limits.

A separate Sophos report claims that recovery costs relating to ransomware attacks have surged by 50% in the past year, now averaging $2.73 million.

Speaking about businesses’ reactions to insurance policies, Chester Wisniewski, director, global Field CTO, commented: “It’s making a difference, and it’s having a broader, more positive impact on companies overall. However, while cyber insurance is beneficial for companies, it is just one part of an effective risk mitigation strategy.”

Wisniewski added: “Companies still need to work on hardening their defenses.”

However, businesses’ reactive approaches to cyber insurance isn’t improving cybersecurity overall. Only 54% of UK organizations have standalone cyber insurance policies.

Besides covering the benefits of improved cybersecurity, Sophos’s study also highlights some of the attractions of cyber insurance, such as improved protection, freed IT resources and fewer alerts.

More from TechRadar Pro

Craig Hale

With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!