As the scope and nature of cyber threats evolve, the need to protect Operational Technology (OT) environments that control assets and infrastructure has become as critical as the need to protect IT environments. Those of you who attended our Policyholders’ Conference in Baltimore will recall we announced the commission of a cybersecurity white paper with BAE Systems Detica (BAE), a world-renowned cybersecurity consultant. BAE interviewed organizations in the energy and utility industry to assess the development and implementation of security measures that protect OT environments. The white paper, Cybersecurity Report for the Energy and Utility Industry, provides BAE’s observations from these interviews and its field work over the years, along with insights into cybersecurity risks, best practices and trends of particular interest to those responsible for protecting the OT environments in the energy and utility industry.
We will mail a copy of the white paper to every risk manager at our member companies, and we encourage you to share it with your CEO, CIO, COO and others in your organization with responsibility for the security of your IT and OT systems. Additional paper copies are available by request at firstname.lastname@example.org, or you may download the PDF from the password-protected section of our website at aegislink.com (Resources > Publications > Underwriting).
The white paper has also helped guide the development of our new cybersecurity coverage and services offering from AEGIS London – CyberResilience. The policy offers first and third party coverage for cyber attacks against OT and critical infrastructure – in addition to data protection and privacy insurance – the first to do so in a standard product. Given the convergence of IT and OT, increased cyber terrorism activity, and the interdependence of operational assets within the energy industry, there is a clear need to develop tailored cyber insurance for our members to reflect their unique exposures. Our new product therefore combines coverage with a service-based offering which provides a combination of in-house cyber underwriting assessment, risk management consultancy, loss control, threat analysis, incident response and vulnerability management in conjunction with global experts in the critical infrastructure industry.
For more information, please contact George Keefe in our East Rutherford office by e-mail or by phone at 201.508.2797, or Rick Welsh, Head of Cyber Insurance at AEGIS London, by e-mail or by phone at 011.44.207.265.2140.