Why enhance your cyber security with Zurich Cyber Complete?
Zurich's complimentary cyber risk management service for our cyber insurance clients is delivered by our team of cyber risk consultants from Zurich Resilience Solutions (ZRS). At Zurich, we’re passionate about risk prevention and mitigation which is why we are offering Zurich Cyber Complete. Zurich Cyber Complete provides you with access to free services that help bolster cyber risk posture. It also supports you in minimising the potential for an attack as well as the severity of a damaging cyber incident.
Through Zurich Cyber Complete, you can benefit from either a Cyber Health Check or a Cyber Incident Response Exercise, with all services being delivered by an expert ZRS cyber risk consultant.
To access this service, please reach out to your usual broker or Zurich underwriting contact.
Who are Zurich Resilience Solutions?
Zurich Resilience Solutions (ZRS) is the risk engineering division of Zurich Insurance. Zurich, being one of the largest insurance providers in the world, brings in a wealth of experience to the risk management space. ZRS combines its expertise and utilises data to share best practices, providing specialist risk management services to both our insured and non-insured customers.
Cyber is one of the key risk areas where we have internal capabilities, complemented by external partnerships with security firms. We provide a holistic and comprehensive cyber resilience risk advisory service to help you tackle the present landscape, as well as plan to protect against emerging threats.
The two services available through Zurich Cyber Complete are:
Documents
-
Cyber Health Check
If you’re reviewing your cyber security or looking to validate the work you have already begun, this comprehensive assessment is the ideal starting point. A ZRS cyber risk consultant will contact you, giving an overview of the process, and asking for the contact information of the appropriate individuals within your organisation, such as Chief Information / Security Officer, Head of IT Security, and Director of IT.
They will then carry out a half a day interview session, which can be done virtually, during which the cyber risk consultant will gain a full understanding of your organisation’s current cyber security controls and exposures. The process will address all 23 categories of the NIST Cyber Security Framework, including governance, technical controls, response capabilities, training, and other relevant areas.
Following the interview, the cyber risk consultant will develop a customised report which will give you detailed findings. It will also include your score which can be compared to relevant benchmarks within ZRS’ portfolio of clients. Importantly, the final report will include specific and actionable recommendations for your organisation.
Service Features
- Evaluation based on NIST Cybersecurity Framework (or NCSC 10 Steps to Cyber Security)
- Gap analysis
Service Benefits
- Understanding gaps in cyber maturity
- Provides a practical roadmap to improve cyber risk management
- Can be used to garner senior management buy-in for future cyber programmes
- External reassurance
-
Cyber Incident Response Exercises
To ensure the best possible outcome following a privacy breach, ransomware attack or other disruptive cyber event, it’s critical that you take a proactive approach and plan ahead. ZRS offers a service to help your organisation develop muscle memory through scenario-based table top exercises.
A ZRS cyber risk consultant will contact you to better understand your business environment. This enables the cyber risk consultant to create a tailored exercise that appropriately reflects your exposures.
Cyber Incident Response Exercises are conducted in line with industry best practice and scenarios can be developed for various levels of business, cyber and IT stakeholders. The exercise will involve multiple injects that test the versatility of plans in responding to a range of possible outcomes. In total, the table top exercise will take around 3-4-hours to effectively challenge and improve the response capabilities of your team.
The cyber risk consultant will provide a summary of the findings and recommendations.
Service Features
- This is a table-top exercise and so doesn’t intrude on your network
- Multiple eventualities tested in one session
- Scenarios are tailored to your exposures
- Exercise is facilitated by an experienced cyber risk consultant
Service Benefits
- Heightens stakeholder awareness of roles and responsibilities
- Tests the versatility of plans against a range of scenarios
- Identifies gaps in processes to improve response efficiency
- Objective and independent view of preparedness is provided
