Zurich offers customers over 20 hours of free cyber consultancy

Zurich UK is offering commercial customers with a sub £1 billion revenue free access to the newly launched ‘Cyber Complete’ service. The service, which equates to over 20 hours of free consultation, has been developed and tested over the past six months in collaboration with Zurich Resilience Solutions (ZRS), a specialist team developed to help customers build resilience.

Through Cyber Complete, commercial customers with Zurich’s cyber insurance can benefit from either a cyber health check or a cyber incident response exercise, with all services being delivered by an expert ZRS cyber risk consultant. Both options are completely confidential and will be followed up with both a presentation to the customer and full report of the findings. This will help customers understand where they stand against industry peers on a percentile basis.

Cyber health check

The cyber health check is undertaken by specialist cyber consultants at ZRS. During the first part of the process, interviews are carried out with key stakeholders within the customers’ business which can take anything up to a day. These could include discussions with; Chief Information or Security Officers, the Head of IT or Security or IT Director to fully understand current cyber controls and exposures. This process will explore technical controls as well as people and process protocols that are in place.

The free in-depth process will address all 23 categories of the NIST Cyber Security Framework, including governance, technical controls, response capabilities, training, and other relevant areas.

Arunava Banerjee, ZRS Cyber Risk Consultant comments:

This type of gap analysis is a really important process in risk management strategy as it highlights weaknesses in the current approach. It identifies risks across three factors: exposures, hazards and controls. From this, we can offer our customers guidance as to how they can rectify problems identified.”

Findings from this free service are completely confidential and will not be shared with Zurich underwriters unless customers specifically request this.

Cyber incident response exercise

Conducted in line with industry best practice, this is a bespoke exercise designed specifically for each individual customer. It is developed from a two-hour immersion session to understand the business and potential issues that need to be stress tested during the exercise. From this, a half day on-site crisis simulation exercise will be carried out by ZRS cyber consultants. This will help organisations test their cyber incident response capabilities and determine areas for improvement.

Thomas Clayton, Head of Cyber Liability comments:

“Prevention really is better than cure when it comes to cyber resilience. We don’t just want to be a one day a year service at the point of renewal or in the event of a claim. We want to offer more value by working with our customers to help them safeguard against risk throughout the year.

“We have a wealth of information we can utilise to support this service as well as expert consultants. It’s a combination of customer insights, claims and technology which enables us to provide valuable insights and learnings from each customers’ individual industries.”

All customers with a cyber insurance policy with a sub £1 billion revenue will be offered free access to the new free service at the point of renewal or setting up a new policy. This is a completely confidential service for our customers and the findings will not be shared with our underwriters or any other parties.