Managing Industrial Cyber Risks: Gaps and Solutions

As industries become more reliant on advanced technologies, the risk of ransomware and cyberattacks extends beyond data breaches, potentially crippling production and supply chains.

Industrial businesses are facing a critical challenge as ransomware attacks increasingly target production floors. These cyber incidents may cause physical damage not adequately covered by existing cyber or property insurance policies. With advancements in automation, industrial connectivity, and artificial intelligence, a protection gap is growing. Tokio Marine Kiln Group Ltd. (TMK) highlights this concern, especially as the Asia-Pacific's manufacturing sector, which produces over half of global output, accounted for a significant portion of cyber incidents in recent years.

Industry 4.0 Adoption Elevates Risks

The Asia-Pacific region, rapidly adopting Industry 4.0 technologies, has seen a marked increase in system intrusion attacks. This trend heightens the demand for robust insurance solutions. Lakshitha Fernando, general manager of Solarelle Insurance Pvt. Ltd., points out that the pace of technological integration exposes manufacturers to greater risks. Yet, amid these evolving threats, some organizations deprioritize insurance for industrial cyber exposures due to the infrequency of large-scale losses, as noted by TMK cyber underwriter Georgie Furness-Smith.

Gaps in Traditional Coverage

Traditional policies often fail to cover the unique nature of cyber-induced physical damages. Cyber insurance typically excludes physical damage, while property insurance may not address the cyber angle, leaving manufacturers exposed. According to Chris Hewison of PwC China, bridging this gap requires a synergistic approach combining cyber, property, engineering expertise, and business interruption strategies to ensure comprehensive coverage for cyber-related incidents.

Strategies for Comprehensive Risk Management

Jeremie Deschamps from Lockton Companies LLC emphasizes the importance of translating technical vulnerabilities into insurable risks. This approach includes managing downtime and covering cyber-triggered damages. Organizations are advised to conduct thorough risk assessments and enhance cybersecurity measures to align their insurance programs with their operational realities.

• Evaluate dependencies between IT and operational systems.
• Ensure insurance programs cover cyber-triggered events.
• Explore specialized insurance products for cyber-induced physical damage.
• Implement comprehensive cybersecurity protocols for industrial resilience.

Expanding Vulnerabilities Across Sectors

The continuous interconnection of industries poses emerging challenges beyond manufacturing. Sectors such as logistics and healthcare may face increased risks due to their reliance on technology and automation. As incidents potentially affecting physical processes rise, businesses must focus on strengthening their cyber defenses and aligning insurance products to cover these multifaceted risks.