The question is no longer whether we will one day be attacked, but when.
How is companies’ exposure to cyber risks evolving? Why has this now become a major concern?
Jérôme Wiwinius (J.W.): Cyber risk has clearly become the number one risk for companies. All activities now depend on digital solutions—for information exchange, accounting, or access to software tools. Today, executives’ greatest fear lies in the unavailability of their information systems and in data loss. An attack can lead to the complete paralysis of a company and, consequently, significant financial losses. Added to this are risks related to penalties, particularly in connection with data protection, as well as reputational damage.
Emeline Rodriguez (E.R.): Today, these risks affect both large organizations and small businesses. A company is 21 times more likely to suffer a cyberattack than a fire. The question is no longer whether we will one day be attacked, but when. Preparation and protection are therefore essential.
Between prevention, protection, and crisis management, how should companies approach this?
E.R.: Each element is important, and all are complementary. As a partner to businesses and professionals, with the aim of helping them better understand and manage risks, we wanted to implement an innovative, digital solution built in collaboration with a cybersecurity partner, Dattak. The approach developed with easyPRO Cyber covers all aspects—from assessing a company’s maturity in terms of risk exposure to incident response, including remediation of critical vulnerabilities and coverage of costs and losses in case of an issue.
What does this look like in practice?
J.W.: Our role as an insurer is to help stakeholders reduce their risks in order to insure them more effectively. When it comes to cyber risks, it is essential to implement basic measures, such as deploying antivirus solutions and performing regular backups. Through the solution developed with our partner, we offer a simple online process to assess a company’s level of security. This analysis, available free of charge, determines whether the company is eligible for the proposed coverage. If not, the assessment identifies the measures that must be implemented.
What does the coverage you offer include?
E.R.: More than just coverage activated in the event of an incident, the approach translates into comprehensive, preventive support. Beyond the initial assessment, our clients benefit from a platform that continuously scans their security, indicating their level of risk exposure and the vulnerabilities they face. This complementary approach is valuable alongside their IT providers. The solution also enables regular phishing tests, designed to raise employee awareness of cybersecurity risks. Finally, when an incident occurs, our clients can rely on the support of a team of experts available 24/7 to address the threat and restore systems.
J.W.: Our aim was to simplify the approach to make it accessible to as many people as possible. Cyber insurance offerings were often complex, time-consuming to implement, and not very accessible. We wanted to provide a solution that is simple, fast, and comprehensive.
Prevention helps minimize residual risk and offer affordable premiums.
What risks does your insurance solution cover?
J.W.: The preventive approach helps minimize residual risk and makes it possible to offer affordable premiums to both large organizations, which already have the expertise to protect themselves, and smaller entities. Premium levels are determined based on the assessment and the company’s turnover. The coverage includes a wide range of risks: malicious intrusions, viruses, ransomware, as well as accidental human errors such as data deletion, fraud schemes (social engineering), and internal malicious acts. It may also cover bugs, IT failures, or programming errors.
And what guarantees does it provide?
E.R.: The guarantees cover all aspects of cyber insurance, including assistance and crisis management, with a permanently available hotline and the intervention of experts (cyber legal and crisis management), third-party liability, as well as financial losses. These include business interruption losses, investigation costs, and regulatory penalties.
J.W.: With this solution, our ambition is to support companies in a concrete way—particularly SMEs, self-employed professionals, liberal professions, as well as local authorities and associations, which were often excluded from this type of solution. Today, no one can ignore the risks inherent in cybersecurity.
Key figures
50 > More than 50 cyber experts
24/7 > Hotline in case of attack
2 > Less than 2 minutes waiting time
21× > 21 times more likely to be a victim of a cyberattack than a fire
€60,000 > Average cost of a cyberattack