Risk Insider: Ryan McGuinness

Cyber Liability and ‘The Interview’

By: | January 7, 2015

Ryan J, McGuinness, M.Ed., ARM, is the Manager of Risk and Insurance for the Hershey Company. Ryan can be reached at [email protected].

In my opinion, cyber risk and liability are the next new frontier for those of us in risk management and the insurance industry today.

We must understand not only the quantitative impact of breaches, but also the breadth of its impact on all of us.

As I look at what’s happened in this space during the last 12 months, I’m reminded of a line in the Grateful Dead song, Truckin’: “Lately it occurs to me, what a long strange trip it’s been.”

We are all familiar with seemingly growing list of breaches in 2014. Retailer’s systems are not alone; health care and personal information breaches are on the rise, too.

Having your credit card replaced due to a breach is almost commonplace today; fortunately, there is no financial impact for most people.

Breach response and business resumption plans are being developed alongside natural disaster plans. Data breach tabletop exercises are the call of the day.

Insurers and insureds, however, are trying to monetize the costs of these emerging risks. The insurance market is already reacting: Premium, limits, sublimits, retentions and possibly capacity are all being affected.

In today’s world, risk managers are working swiftly with their IT, security and legal counterparts to sharpen and test risk mitigation strategies in the event of a breach.

Risk avoidance is not an option in today’s world of global commerce. Companies are diligently and proactively working to improve security measures and loss prevention processes.

The rapid growth of cyber security firms to help to identify and contain breaches is happening globally. Cyber security is fast becoming a leading new enterprise within this space.

Breach response and business resumption plans are being developed alongside natural disaster plans. Data breach tabletop exercises are the call of the day.

The ultimate collateral damage is reputational risk and how behaviors can be impacted.

Sony is latest victim of what appears to be yet another massive breach, but this one is different. While having all the hallmarks of a breach, this event went further thanks to a ripple effect that has impacted not only Sony but the general population as well.

“The Interview” may or may be a blockbuster feature. The fact that the entertainment industry had to change how they do business, however, is an example of the cascading effects a breach can cause.

This breach has possibly had a visceral impact on the population greater than most prior breaches where the event focused on the number of records lost.

I am sure Sony and the entertainment industry will recover. The effects of this breach and the resulting decisions about how and when to release the movie have been memorable. It will be a good exercise in years to come for risk managers to analyze the impact and the response to this breach.

What’s certain, in my opinion, is that we are resilient as an industry and we will respond to this quickly emerging risk. Stay tuned as we make our way through what is certain to be an interesting 2015.

More from Risk & Insurance