In late October, Dyn—a cloud-based internet performance management (IPM) company in the United States—had its server infrastructure compromised following distributed denial-of-service (DDos) attacks.

In essence, DDos attacks work by overwhelming targeted machines and servers with junk traffic, often causing website crashes. In this case, the attacks disrupted popular sites like Twitter, Spotify, Netflix and Amazon.

While DDos attacks are common, experts are concerned at their growing effectiveness, as Dyn is a large firm that services many Fortune 500 companies. It’s clear that cyber attacks are becoming more and more sophisticated, and hackers are no longer simply IT-student pranksters, but rather nation states and other large entities with malicious agendas.

Because of this fact, the looming threat of a cyber attack is more a matter of when than if, and businesses will need to turn to cyber liability insurance for the necessary protection. What’s more, as a reliance on cloud services becomes increasingly important for successful business operations, the value of a strong cyber liability insurance policy will only continue to grow.

A typical cyber liability policy can help protect you from costs associated with a data breach, copyright or trademark infringement, data loss due to hacking and business interruption.

For additional protection, it’s critical that you create a formal, documented risk management plan that addresses the scope, roles, responsibilities, compliance criteria and methodology for performing cyber risk assessments. This plan should include a description of all systems used at the organization based on their importance to the organization, and the data stored and processed within them.

Experts recommend that businesses review their cyber risk plans on an annual basis and update them whenever there are significant changes to their information systems or the facilities where systems are stored, or other conditions occur that may impact the organization.

© Zywave, Inc. All rights reserved

Tablets and other such devices have become increasingly common in the average workplace. And, while these devices can be important for your employee’s daily work, they also represent a cyber risk if they are not properly managed.

The following are just a few of the major risks associated with having tablets in the workplace:

• Mobile malware. Tablets are typically infected by malware via malicious apps and phishing scams. When this happens, a cyber criminal can gain unauthorized access to the device and associated network systems. In general, iOS tablets like iPads are safer from malware than Android tablets. However, mitigating the risk of malware typically comes down to the user. Workers should avoid downloading unfamiliar apps.
• Loss of data. Following a security breach, data loss is inevitable. For tablets, this could mean that users are locked out of their devices altogether. To protect your business, employees should always back up their data, and ensure that no sensitive or proprietary information is stored on it.
• Unsecured networks. Unsecured networks are a particular concern for tablets because they are easy to take on the go into areas with free and public Wi-Fi connections, like cafés and airports. These connections are not always secure and can be easily hacked by cyber criminals. To prevent this, employees should be reminded that no public Wi-Fi is safe. For further protection, offer a virtual private network (VPN) that your employees can utilize to safely use the internet off-site.
• Theft. In addition to virtual threats from hacking and phishing scams, cyber criminals could just as easily steal the tablet itself. This could give them unlimited access to proprietary or personal information. To combat this, employees should never leave their devices unattended. Using a secure password can also help prevent theft of information.

Above all, employers should have a personal device policy in place that accounts for security threats. Employees should know what they can and cannot do with their devices and how to protect the sensitive information contained within. These policies should be extended to other personal devices with internet access, such as smartphones.