Cyber protection still out of reach for most SMEs

As the UK insurance sector heads to Manchester for the annual Biba conference new research has warned small-to-medium enterprises (SMEs) believe cyber cover is simply too expensive to have.

The study from GlobalData found cyber insurance prices are still too high as almost 30% of small-medium UK businesses cancelled policies in 2021 to cut costs.

Despite growing warnings from the UK government and cyber experts of a rise in cyber threats as the war in Ukraine continues, interest is up but for smaller firms that is as far as they can afford to go.

While interest in cyber insurance is certainly increasing, especially amid heightened risk due to the Russia-Ukraine conflict and working from home, the price is likely to still be too high for UK small-to-medium enterprises,” said the report.

The survey found that 38% of these businesses think it is unlikely that they will be targeted, while 29% cancelled their policies in 2021 due to cost cutting.

Ben Carey-Evans, senior insurance analyst at GlobalData, said: “The results from GlobalData’s 2021 SME Insurance survey suggest that SMEs are aware of the threat, but don’t feel it is applicable to them. We expect that, while interest in cyber insurance will continue to rise, price will continue to be a key barrier to cyber insurance uptake in the near future.”

GlobalData added that, as risk of attack increases, so will the premiums. Given that cutting costs is one of the leading causes for policy cancellations, this will be a significant obstacle.

Carey-Evans continued: “Even if UK SMEs do become more concerned about their business being targeted by cybercriminals, they are unlikely to be willing to pay even higher premiums to protect themselves. It is a difficult product for insurers to price, as unlike other products, they cannot look to limit risk, any SME could be hit with a cyberattack at any time, and the costs can be significant.”

The Ukraine-Russia war has only heightened potential cybersecurity risks. The UK’s National Cyber Security Centre (part of GCHQ) advised all organizations in the UK to bolster their cybersecurity in March 2022, specifically due to the increased risk posed from the Ukraine-Russia war.

Carey-Evans explained: “As there are more and more high-profile attacks, the idea that anyone is vulnerable, even SMEs, should spark increased uptake of cybersecurity insurance. However, the issue of pricing will remain at a time where SMEs are already struggling with a difficult economic environment.”

Follow us on twitter: @risksEmerging

Twitter feed is not available at the moment.