Data Security

The Chubb Index highlights the importance of taking more protective steps against cyber attacks by the professional services industry

In the most recent version of the Chubb Cyber InFocus Report, Chubb information uncovers that the expert administrations industry need to take more proactive and defensive measures against potential digital assaults. Chubb has seen a 10% expansion in digital occurrences identifying with proficient administrations organizations. These are generally email-driven associations, which means there are numerous open doors for workers to tap on noxious connections, driven by email phishing.

"Most cyber attacks are coming from outside the company, leaving businesses at greater risk in the current work-from-home environment," said William A. Wise, Head of Chubb Cyber North America. "Due to the rise in incidents resulting from email phishing, employers with remote employees need to take additional steps to protect their companies against cyber threats."

For example, companies should use multifactor authentication for protected data and to keep software and applications up-to-date.

In addition to highlighting risks within the professional services industry, the latest Cyber InFocus report also examines:

Changes in cyber vulnerability by industry since 2016.
Breach sources over the last four years showing an increase in threats by external actors, including malware attacks.
Cyber crime examples in the most vulnerable industries, how they were exposed and what was learned in the process.

"As cyber incidents continue to evolve in complexity and focus, it's critically important that companies understand how cyber-and privacy-related incidents affect their organizations," added Anthony Dolce, Vice President, Cyber Lead, Chubb North America Financial Lines Claims. "The Cyber InFocus Report is a timely tool to help agents, brokers and companies understand the latest trends on cyber threats, helping to prevent issues from happening in the first place."

Chubb's Cyber InFocus report, which previously dispatched in mid 2018, gives experiences into the impacts of digital dangers and patterns on explicit enterprises or business portions each quarter. Such knowledge depends on Chubb's utilization of outsider exploration, just as exclusive cases information from over twenty years of protecting associations against developing digital dangers.
About Chubb Cyber:
Chubb is a leader in insuring cyber risk. Combining industry-leading underwriting and expert third-party incident response services, Chubb offers policies that are tailored to the specific needs and risks of its clients to ensure they are ready with the tools and expertise necessary should a cyber incident occur. Moving swiftly to connect clients with the proper parties to minimize data loss is only part of what Chubb delivers. Keeping an eye on the ever-evolving cyber security landscape, Chubb looks for ways to do more for its clients by offering cutting-edge products and holistic services to every client.

About Chubb
With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. As an underwriting company, we assess, assume and manage risk with insight and discipline. We service and pay our claims fairly. The company is also defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb maintains executive offices in Zurich, New York, London, Paris and other locations, and employs approximately 33,000 people worldwide.

Spotlight

Other News
Data Security

GuidePoint Security Announces Portfolio of Data Security Governance Services

GuidePoint Security | January 30, 2024

GuidePoint Security, a cybersecurity solutions leader enabling organizations to make smarter decisions and minimize risk, today announced the availability of its Data Security Governance services, which are designed to help customers address the challenges of unstructured data and data sprawl through a proven process and program to meet their unique needs. GuidePoint’s Data Security Governance services consist of policies, standards, and processes leveraging the newest technologies to meet organizations’ data governance goals in both on-prem and cloud environments. Once the right strategy is determined with the customer, GuidePoint Security consultants will review program requirements, assess current policies and controls, perform gap analysis, design and develop/enhance the program, recommend and implement supporting technologies, and create operational processes and metrics. “Whether an organization is just beginning to build their data security governance program or needs help assessing and improving an existing program, our team and service capabilities are built to meet them at their current maturity level,” said Scott Griswold, Practice Director - Security Governance Services, GuidePoint Security. “We work side by side with the customer to conduct the necessary data discovery in their environment and provide tailored recommendations for solutions and processes to ultimately build/improve upon the data security governance program.” GuidePoint’s Data Security Governance Services include: Sensitive Data Cataloging: For organizations just getting started in the process of protecting their sensitive data, GuidePoint offers Data Identification workshops to identify sensitive data types in the environment, including trade secrets, intellectual property, and sensitive business communications. Data Security Governance Program Assessment: For organizations with existing Data Security Governance or Data Protection programs, GuidePoint Security experts will assess the program to identify policy non-compliance, gaps in data protection requirements—whether legal, regulatory, contractual, or business—and program maturity levels. Data Security Governance Program Strategy Development: The GuidePoint team will work with an organization's key stakeholders to design a program strategy aligned with relevant requirements. The outputs of this effort include delivering ongoing sensitive data discovery, automated classification and labeling, the application of required sensitive data protections, restrictions on where sensitive data can be stored and sent, and data retention policy enforcement. Merger and Acquisition Data Identification: This offering provides the ability to identify sensitive data within an M&A target or recent acquisition (including locations, amounts, and access rights) and then perform penetration testing on the storage repositories where that sensitive data exists to determine the risk of data compromise. About GuidePoint Security GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions that minimize risk. Our experts act as your trusted advisor to understand your business and challenges, helping you through an evaluation of your cybersecurity posture and ecosystem to expose risks, optimize resources and implement best-fit solutions. GuidePoint’s unmatched expertise has enabled a third of Fortune 500 companies and more than half of the U.S. government cabinet-level agencies to improve their security posture and reduce risk. Learn more at www.guidepointsecurity.com.

Read More