Cyber Insurance Rates Are Dropping, but Exclusions Widen
Summary
Cyber insurance rates are starting to decrease, offering some relief to organizations. However, this trend is accompanied by a widening of policy exclusions, meaning fewer types of cyber incidents may be covered.
IFF Assessment
FOE
While dropping rates might seem positive, the widening exclusions suggest that insurers are becoming more selective about what they cover, potentially leaving organizations exposed to risks not previously excluded.
Defender Context
As cyber insurance becomes more restrictive, defenders need to understand their residual risk and ensure they have robust internal security controls in place, rather than relying solely on insurance for financial protection against cyber incidents.