1

Hi all,

I am seeking suggestions for cyber security and ransom insurance for a non-profit. What do you all use and would suggest? What offerings should I be looking out for?

10 Spice ups
2

Size of the company?

Location of the company?

Are you looking to protect on-prem, cloud, both?

What type of devices do your users use?

3

Will be 20 users in-house

Arkansas

Both

Will be windows pcs and personal cell phones

4

Hopefully someone in the area can recommend someone.

I’m not sure the business should cover peoples personal devices, business ones, sure.

5

Hey OP,

Stefan from Pulseway here, I think we may be able to help.

We offer both Cybersecurity and Ransomware detection via out RMM platform, we also have a really handy mobile app which is super useful for network monitoring on the go. We have also worked with several non-profits too with similar needs and users.

Check us out and if you think we might be a good fit you can always start a free trial before you commit to anything.

If you have any questions please let me know.

Thanks.

6

Most insurers are no longer offering ransomware insurance. Cyberliability, yes, but in most ransomware is explicitly excluded for several reasons…1) in many cases paying the ransom is illegal as the payment would go to malicious actors in a sanctioned state; 2) many insurers now believe that the purchase of insurance is a disincentive to good cybersecurity hygiene…i.e., if you have insurance, you don’t need to invest in “defense-in-depth”; and 3) for insurers that do provide ransomware coverage, the cyber defense that they mandate before coverage can be provided would require a sky-high investment. Remember, insurers are in the business of making money. They can’t make money if there are tons of claims against them, so they do everything they can to prevent those claims from ever being filed.

My advice would be to take the funding that you would have spent on ransomware insurance and procure a small cyberliability policy (say $5 mil for business interruption coverage, etc.) and then spend the remainder on good endpoint detection, network intrusion detection and prevention, good firewalls, and possibly Bullwall’s RansomCare product for file servers ( https://bullwall.com ).

2 Spice ups
7

Considering that >80% of data breaches are a result of human behavior, make sure training and security awareness is part of your cybersecurity program as well. I’d be remiss to say that you should check out KnowBe4, but make sure you are growing the security behaviors and mindset of your organization so folks are thinking beyond just checking links.

With email, they want to ask themselves if the email unexpected? is the person a stranger and are they asking you do something strange, unusual or very quickly? Answering YES should trigger a “Trust AND Verify” process.

3 Spice ups