Week in Rewind <<

If you haven’t noticed our focus has been heavily weighted in the area of cyber risk! Too many of our friends and clients have been impacted lately by cyber thieves. Yes, we sell insurance, but we are passionate about the benefits of insurance. We are all about Mitigating Risk and Loss Exposure!

So How Does Cyber Insurance Actually Help?

What Does It Cover?

First thing to know here is, in most cases you can design a plan to cover your business’ specific needs. As a generalization Cyber Coverage includes the following:

  • Defense and Settlement – civil proceeding or investigation
  • Regulatory fines and penalties including forensic examination
  • Re-certification services
  • Cyber extortion
  • Ransomware
  • Website media
  • Business interruption
  • Data recovery
  • Crisis management and fraud response
    • notification to breach parties
    • call center operations
    • design and implementation of website for advising breach parties
    • credit monitoring
    • public relations
    • associated legal expenses

What It Does Not Typically Covered

  • Potential future lost profits
  • Loss of value due to theft of intellectual property
  • Improvement costs to internal systems after cyber evet
    • Your other policies may be “activated” in the event of a cyber incident, but there are likely gaps in coverage for what damages are actually covered. The industry term, “Silent Cyber” refers to cyber loss exposure not covered under traditional, non-cyber insurance policies; namely the exposure is silent.

IT Risk Management

In an effort to further educate our audience we are providing links to our previously published articles on creating a better infrastructure to avoid successful attempts.

The Wall Street Journal reported that Colonial Pipeline authorized ransom payment of $4.4 million as a result of the company not being able to quantify the magnitude of the cyberattack breach to their system and the length of time to get things up and running again. Feet held to the fire for resolve and the decryption tool provided for ransom payment did not bring full restore back to Colonial. We can all feel the impact of the Colonial hack.

CNN reports that the Justice Department indicated that 2020 was the worst year for cyber attacks with ransomware demands, on average, exceeding $100,000 but as high as tens of millions of dollars. “….A key lesson here is that while technology and automation is good, we must also have the ability to efficiently operate manually as well. Attacks will happen, but how quick can you recover and restore critical services?”, Brian Harrel, former assistant secretary for infrastructure protection at the Department of Homeland Security, as reported by CNN. Having the support of insurance coverage through a Cyber policy is definitely one way to mitigate recovery exposure, should you fall victim.

NAPEO has pre-recorded webinars and information available on Cybersecurity. For non-members, follow this link to join.

Libertate Insurance Services has access to a variety of programs for Cyber Risk Coverage. Contact us, let us help you identify your Company’s Cyber Risk and find the best placement for your needs.

Cyber Attack Nightmares Continue

While most of us were celebrating Mother’s Day on Sunday, Colonial Pipeline was attempting to assess the damage related to a cyber-attack last week. Colonial Pipeline accounts for 45% of the East Coast’s fuel (diesel and petroleum). Colonial has had to take 4 of their main pipelines offline; they are operating off of smaller lines and delivery points. Impacts from New Jersey down through Texas are expected. As a response to the cyber-attack and limitation of the company’s resources the US government issued emergency legislation to lighten the regulation on fuel transportation. Extended shutdowns are “fueling” fears over pump prices.

The 5 Key anticipated cybersecurity risks in 2021 were reported as Endpoint threats (servers, VPNs and cloud based software services), Remote workforce exposures (weakened network security of remote devices), Cloud Security (business-critical data on cloud platforms), and Shortage of security professionals or services (availability and affordability). You can check out the full article here of expected cyber threat trends for 2021.

Newer threats emerging are “multi-stage attacks like ransomware or “low and slow hacks”. Ransomware attacks gain exposure through stolen credentials and are designed with the goal of systems and data infiltration. While mutli-factor authentication (MFA) is an important security feature to mitigate ransomware attacks, it is reported that 78% of Microsoft 365 admin users don’t activate MFA.

Colonial Pipeline’s hack is reported to be a ransomware attack, ” Sources said the ransomware attack was likely to have been caused by a cyber-criminal gang called DarkSide, who infiltrated Colonial’s network and locked the data on some computers and servers, demanding a ransom on Friday.

The gang tried to take almost 100 gigabytes of data hostage, threatening to leak it onto the internet, but the FBI and other government agencies worked with private companies to respond. The cloud computing system the hackers used to collect the stolen data was taken offline on Saturday, Reuters reported.

Colonial’s data did not appear to have been transferred from that system anywhere else, potentially limiting the hackers’ leverage to extort or further embarrass the company, the news agency said.” You can read the full Colonial Pipeline article issued by BBC News here.

Mitigate Your Cyber Security Risks

1 – Identify and document asset vulnerabilities; What data are you storing?

2 – Identify and document internal and external threats; disgruntled employees, Dark Web techniques

3 – Assess your vulnerabilities; software security up to date and in place

4 – Identify potential business impacts; financial, operational, etc

5 – Identify and prioritize your risk responses; Response plan, best practices, documentation of procedures

Check out our previous articles on Cyber Risk at PEO Compass search Cyber. Libertate Insurance Services has Cyber Programs available to mitigate the loss.

The 2021 PACE Conference is Right Around the Corner!

Who’s excited about an in person conference? We are!

PACE is next week (May 2 – 5) in beautiful Asheville, NC at the Omni Grove Park Inn. Below is additional information. Hope to see you there!

Your Clients Need You Now, More Than Ever!

Recover, Regroup, and Rebuild – Together

This is the most important conference we have ever had. It is a must-attend experience for success.

Tomorrow belongs to the bold, agile, and digital. Luckily, that’s us. It has to be. Now, more than ever, we need each other – and we need technology, not only to survive, but to bounce back — no, FORWARD! — full force and really thrive.

We can rebound so much faster if we combine our genius. Friends before competitors, right? We’re all going through an unprecedented, difficult time. The world’s business landscape has changed in ways that we never imagined. We’re in the trenches and we need each other to get back to high ground. For almost 40 years, we’ve been on the cutting edge of innovation, making history. We can’t stop now.

We need concrete, actionable strategies to reboot and triumph – and that’s what the 2021 PACE Annual Conference is all about.

Sales, marketing and technology: we need to excel in all three in order to charge ahead. Our speakers are experts at digital success. The sessions are practical and aimed at capitalizing on newfound opportunity caused by the pandemic, and protecting your company from future uncertainty. Be sure to bring your senior sales and marketing managers to keep them on the digital forefront.

Come to where senior PEO leaders freely share their insights on what’s working and what’s not, in a fun and spirited environment, where transparency, honesty, and friendship come standard.

We’re going to succeed – together.

For more information, click here

Florida PEO Legislative and Legal Update: April 21st at 2p est.

SAVE THE DATE: Given all of the recent legislative activity in Florida, you will not want to miss the upcoming FAPEO PEO Legislative and Legal Update on 4/21/21 at 2p est. See details and login information below.

On April 21st there will be ten days left of Florida’s legislative session and there remain a lot of unanswered questions. One bill provides SUTA rate relief for all Florida job creators hit with rate increases from social costs from the pandemic. Another bill would shift liability for workers’ compensation fraud from construction contractors to PEOs. You’ll discover which bills have stopped moving forward as well as which ones are likely to become law.  And, what this means for your PEO. 

No registration necessary.  Just show-up on April 21st at 2:00 pm Eastern by clicking: HERE

If you don’t have an electronic device with an internet connection you may access via phone: 

Phone: (929) 205-6099

Meeting ID: 829 5013 3757

Passcode: 738647

Florida PEO Legislative & Legal Update

Wednesday, April 21, 2021

2:00 pm – 4:00 pm Eastern/1:00 pm – 3:00 PM Central

Florida PEO Legislative Briefing

  • David Daniel, Florida PEO Governmental Affairs, Smith, Bryan & Myers 

Legal Issues Impacting Your PEO

  • Michael Miller, FAPEO General Counsel, Fisher & Phillips LLP

Deputy General Counsel Report

  • Torben Madson, FAPEO Deputy General Counsel, The PEO Law Firm

National PEO Legislative & Legal Issues Briefing

  • Nick Kapiotis, General Counsel
  • Michael Kreiter, Senior Director of State Government Affairs, National Association of Professional Employer Organizations

House Bill 1305: Week in Review

Happy Friday!

Here’s a recap of the recent activity regarding House Bill 1305:

  • The bill now moves to the House State Administration & Technology Appropriations Subcommittee. This hearing could be as early as Thursday, April 1, 2021
  • NAPEO and FAPEO have asked that we all email our state representatives regarding why this bill is bad for the PEO industry

More to come…

Have a great weekend!

Happy Women’s History Month from PEO Compass!!

In addition to the United States, Women’s History Month is celebrated in the UK and Australia. Though declared a formal ‘month’ by Congress in 1987, many have been celebrating the vital role of women dating as far back as March of 1911!

To discover more, visit the National Women’s History Museum or the Women’s History Month website sponsored by the Library of Congress.

For NAPEO members, this Thursday is the next Women in NAPEO (WIN) event of which Libertate is a proud sponsor. Teresa Carroll, President of Oasis, a Paychex Company will discuss the habits and behaviors that are holding women back as outlined in the book How Women Rise by Sally Helgeson and Marshall Goldsmith. For registration information, click here.

Finally, as a woman who has been fortunate enough to be surrounded by intelligent hard-working female role models her entire life (my grandmother being one of them – pictured below), I am so proud of this month! Sharlene Singleton, here’s to you!