Category Archives: cyber insurance

Jargon Buster

As is often the case with any kind of specialist industry there are often keywords and phrases that are used which you may not always understand. As part of our mission to create transparency we felt that it was important to ensure that our clients and understood exactly what we were saying. So we have put together a list of keywords that you will often see when looking at this subject and tried to explain them as clearly as we could.





This is the raw set of numbers/ figures and words that a business has collected for market research etc. It remains data until it is given a context. Data is used as parts of a jigsaw to build a bigger picture of an environment or person.


This is where data has been given a context and it now means something to the business or whoever is looking at it.


This simply relates to the use of anything digital, cyber can be anything from the use of a piece of software to the data/ information held on a hard drive.

Cyber Attack-

This is the term used for when hackers try to get into your systems and steal/ withhold access to your information or other systems to disrupt the businesses operations.

Ddos attack-

This is where a hacker floods your website with traffic to shut it down. Often small websites cannot cope with the traffic volumes and as a result the website crashes.

Trojan horse attack-

This is where a hacker hides a malicious piece of software as something else to get it installed onto a computer and from there they are able to hack into your system.


This is a piece of software that blocks access to files and other systems until a payment is received and then they may grant access to your files.

General Data Protection Regulations (GDPR)-

These are the new regulations that are coming into force in 2018 to standardise the legislation across border all around the EU. It will be replacing the current data protection act.

Data breach-

This is where a business suffers from the loss or theft of data that they hold. They are liable for this as data controllers and as a result must notify the relevant authorities.


Now you understand what were going on about, have a read about Cyber insurance you might need it.

Are you ready for GDPR?

GDPR (General data protection regulations) is the biggest change in data that there has ever been. Under new regulations businesses must change the way they look at and protect the data that they are responsible for. Ultimately failure to stick to the regulations that have been outlined will mean that not only is there reputational damage caused but also regulatory fines will be incurred for major data breaches.


GDPR – Understand Your Risks And Responsibilities

GDPR is designed to protect the data and information of EU citizens and to do this the regulations are there to enforce the way in which businesses process and store data. Under the new regulations businesses and organisations are designed to appoint a data protection officer. Their role will be to ensure that data is stored and processed in a way in which is most secure. They will also be given the task of supervising the compliance to GDPR.

GDPR – Replacing The Data Protection Act

GDPR is going to replace the existing data protection act. As times have changed and data is a much more profitable commodity to both businesses and cybercriminals. The biggest changes under GDPR will be the time that is allowed for your data controller to notify the local authority of a data breach. Under GDPR a data controller/ data protection officer has 72 hours to notify the local authority of the breach. The other major change to notify is that under GDPR the maximum fine for an organisation for lack of compliance that has led to a breach will be £20 million or 4% of annual worldwide turnover whichever is the greater amount.


* Data from Breach Level Index.

GDPR – How To Deal With A Data Breach

It is important that a business knows how to deal with a breach and understands the steps to eventually get back to the situation they were prior to the breach. Using these steps this can be possible;

  1. Identify the breach and take steps to end it.
  2. Check your insurance policy and notify your insurer.
  3. Identify the personal data breached – the type of data and number of records.
  4. Determine remediation measures.
  5. Notify the ICO without undue delay and in any event within 72 hours.
  6. Notify affected data subjects if the breach is likely to result in high risk to their rights and freedoms.
  7. Implement remediation measures and monitor.
  8. Review root causes of the breach and take steps to prevent repetition.
  9. Provide further training to staff as required.


Advantages of Cyber Insurance










Read more about cyber insurance