Risk. Reinsurance. Human Resources.

Our cyber resilience framework

To achieve cyber resilience, organisations must commit to a continuous process of evaluation and improvement. Aon and Stroz Friedberg offer a full range of services to help you approach cyber as an enterprise risk.

Contact

Aon Cyber Solutions Network

Experienced team and resources Innovative market solutions Industry and product expertise Proprietary data and analytics Strategic acquisition of Stroz Friedberg

Cyber Risk Solutions

Aon Risk Solutions

Risk. Reinsurance. Human Resources.

Entertainment & Hospitality

Financial Institutions

Public Sector

Technology & Communications

Higher Education

Construction & Real Estate

Energy & Power

Heavy IndustriesHealthcare

Retail

Life Sciences

60+dedicated cyber

insurance professionals

globally

500+Cyber claims

handled by Aon since 2012

$450M+total premium placed in 2016

Transportation & Logistics

Food, Agriculture &

Beverage

Quantify Transfer

Respond

ImproveTest Assess2,300+Cyber Risk

Solutions clients

Aviation

Marine

Professional Services

Adam Peckman Global Cyber Risk Consulting Practice Leader +44 (0)7803 695386 adam.peckman@aon.co.uk

Spencer Lynch Managing Director Stroz Friedberg +44 (0)20 7061 2304 slynch@strozfriedberg.co.uk

Vanessa Leemans Global Cyber Chief Operating Officer +44 (0)20 7086 4465 vanessa.leemans@aon.co.uk

Mark Buningh Cyber Risk Practice Leader The Netherlands +31 (0)65 134 6614 mark.buningh@aon.nl

Leslie Clement Consultant Cyber & Privacy Risk +31 (0)10 448 7802 leslie.clement@aon.nl

Shannan Fort Cyber Product Development Leader Global Broking Centre +44 (0)20 7086 7135 shannan.fort@aon.com

Aon UK Limited is authorised and regulated by the Financial Conduct Authority. FP: GBCEXT0006

The evolving cyber threat

2017 EMEA Cyber Risk Transfer Comparison Report

Across all industries, our clients are continuing to invest in deploying digital technologies to stay competitive and drive quality and efficiency objectives.

• The impact of business disruption to cyber assets is 50% greater than to property, plant and equipment assets (PP&E)

• Only 15% of the probable maximum loss (PML) potential for information assets is covered by insurance; almost two thirds (60%) of total PP&E asset values are protected

• 65% of EMEA organisations expect their cyber risk exposure to increase over the next two years

• Only 30% of respondents state they are “fully aware” of the economic and legal consequences of an international data breach or security exploit

Percentage of PP&E and information assets covered by insurance - EMEA

0%

10%

20%

30%

40%

50%

60%

The percentage of potential loss to PP&E assets

covered by insurance

The percentage of potential loss to information assets

covered by insurance

70%

60%

15%

Technology Drivers Business Drivers Risk Drivers

1st Party 3rd PartyTa

ngib

leFi

nanc

ial

Cyber exposure trends

1 Any major cyber event will result in:• PR response and continuity costs• Immediate and extended revenue loss• Restoration expenses• Defense costs

2 Third parties will seek to recover:• Civil penalties and awards• Consequential revenue loss• Restoration expenses

3 Physical damage is possible:• Property damage• Bodily injury

4 Physical damage may cascade to others:• 3rd party property damage• 3rd party bodily injury

• IoT - The Internet of Things: Reliance on technology and increasing connectivity

• Cloud computing and big data analytics: Increased use of technology vendors

• Social media: Social engineering, phishing and spear phishing

• Ransomware, malware, cyber heist and blockchain

• U.S. and international regulatory environment: EU General Data Protection Regulation – effective May 25, 2018

1

3

2

4

Cyber loss spectrum

1

3

2

4

Helping clients to manage cyber risk

Adopting a Risk Based Cyber Insurance Strategy

Aon’s cyber capabilities can support organisations in embracing a risk based approach. This facilitates the deployment of a more effective cyber insurance strategy to help optimise the total cost of risk associated with cyber exposures.

We help to define an organisation’s cyber risk strategy through:

• Cyber 360o Assessment - an enterprise wide approach to cyber security risk that provides a detailed view into a organisation’s unique technology profile and threat landscape, with a focus on facilitating risk quantification and insurability.

• Cyber Impact Analysis - a data driven analytical framework supporting organsations to optimise their resilience strategy through mitigation and transfer. Existing risk financing strategies can also be enhanced through modelling cyber loss scenarios and stress testing current limits.

Cyber Innovation

• Aon Cyber Enterprise Solution™ - broadens the scope of cyber coverage to include: property damage arising from a network security breach, business interruption and extra expense coverage arising from a systems failure, contingent network business interruption for IT vendors and the supply chain, and cyber terrorism coverage.

• Aon Cyber Captive Programme - an alternative approach that helps organisations identify, assess and quantify their cyber risk; ultimately making informed decisions on risk retention in a captive, as well as providing broad form risk transfer capacity and secure comprehensive coverage through the Aon Cyber Enterprise SolutionTM.

• Aon GDPR Prepare & Protect - a modular solution that helps organisations prepare for and manage financial, regulatory and legal risks associated with processing personal data under the EU General Data Protection Regulation, which comes into effect on the 25th May 2018.

Artificial Intelligence

Evo

lvin

g C

yber

Eq

uat

ion

Social Media

Cloud Computing Mobility

Big DataVirtual Reality

Internet of Things

Automation

ConnectivityData Breach

Media Liability IP Infringement

Material Damage Business

Interruption Product Liability