Aon plc is a British multinational professional services firm that sells a range of financial risk-mitigation products, including insurance, pension administration, and health-insurance plans.
2024 was a significant year for the cyber ecosystem with events continuing to highlight the importance of organisations managing their cyber risk exposures effectively. But what does this mean for the 2025 cyber insurance market? Listen to Aon’s Catalina Esteban Loring, Luiza Meziat and Chiara Pastore as they discuss:-Capacity, competition and coverage trends in 2024 (00:53)-The evolving cyber threat landscape and dual role of Artificial Intelligence (06:41)-Regulatory evolutions and the growing concern over data privacy (08:43)-The significance of risk transfer and quantification (10:16)
This summer’s CrowdStrike outage highlighted the potential for significant loss in the insurance market and organisations. In this episode, Aon experts weigh in on the impact of the CrowdStrike incident and the cyber and supply chain lessons learned. Listen to Sabba Manyara, Director in Aon’s Cyber Solutions, Matt Chmel, Aon’s Chief Broking Officer for North America and Alistair Clarke, Cyber Broking Leader as they discuss how Crowdstrike has changed the cyber market. Topics covered include:The global significance of the CrowdStrike incident (01:18)What CrowdStrike means for the future of cyber risk (05:38)Deep dive into the current cyber insurance market (07:24) Additional Resources:Cyber Resilience Report: Cyber Attacks on Supply Chains Are Causing a Widespread ImpactResponding to the CrowdStrike Outage: Implications for Cyber and Technology ProfessionalsResponding to the CrowdStrike Outage: Implications for Cyber (Re)Insurance
Listen to Chris Scott, Head of Cyber Solutions UK and Marie-Louise de Smit, Cyber Insurance Leader, share what they’ve recently seen in the cyber insurance market. Topics covered include:Recent public cyber incidents (00:59)Current threat dynamics and trends in the ransomware space (06:00)New cyber legislation and the complex regulatory environment (09:15)What should be top of mind for organisations when building cyber resilience (16:00)Current cyber insurance market conditions (18:50)Key takeaways (23:32)To find out more about cyber legislation, you can read Aon’s new article focused on NIS2 here: https://aon.io/4bRWGzITo know more about building sustained Cyber Resilience in your organisation, click here: https://aon.io/4bVkUsJFor any other information, contact us: https://aon.io/4bX3j3E
David Molony, Head of Cyber for EMEA and Catalina Esteban Loring, Senior Cyber Broker sit down for Aon’s first 2024 EMEA Cyber Market Trends podcast as they reflect on Q1 market dynamics and discuss:-How 2023 ended for the cyber insurance market-Claims and loss trends including an analysis of pricing and capacity.-Innovation in the market and what you can expect to see further into 2024. Explore Aon’s 2023 Global Risk Management Survey to find out more about a cyber-attack or data breach being ranked as the number one risk faced by organisations: https://bit.ly/GRMS2023. You can also use this link: https://bit.ly/cybercontracts, to read Aon’s latest E&O article and discover why now is the right time to customise cyber and E&O contracts.
Listen to Cyber Broking Leaders Soren and Alex as they review the UK & EMEA findings featured in Aon’s 2023 Cyber Resilience Report. Highlighting the trends in the Cyber insurance market as we close this year, they discuss how:- Overall cyber resilience has improved and what is high on the agenda for organisations- How ransomware trends are increasing and what other risks are at the forefront- Key challenges organisations face when presenting their risk profile to the insurance market and how to prepare effectivelyUse the link aon.io/494JV3Z for directing to the report
The Ransomware epidemic is causing major problems for organisations in all sectors across the globe, but there are some simple IT security steps that can be taken to help harden your organisation’s security posture. This episode will discuss common attack routes, latest trends in entry and exfiltration processes from a network and methods to proactively identify these risks and implement adequate security measures.
Approved procedures and guidelines are the baseline for managing the human element of your organisation’s security. In our Red Team and Social Engineering work we have seen that with concerted effort and a little bit of creativity, it is possible for employees to circumvent these procedures and perform actions they should not do. This episode reflects on the techniques used to elicit undesirable behaviour from your staff, as well as how some basic principles can have great results when training staff on how to recognise and resist social engineering attacks.
PSD2 is a huge step away from the traditional banking model in the UK and EU. It mandates that banks must allow authorised 3rd party service providers to access their highly sensitive information - a task never asked of them before. Clients are increasingly seeking advice and guidance on performing this securely. This episode focuses on the challenges that PSD2 brings to banks and how they can best prepare for them.
Most organisations will use many third-party products within their IT infrastructure, yet few perform thorough security assessments of these and understand all risks associated with them. This episode looks at how our cyber security teams have helped many organisations holistically assess their risk from third-party products and vendors, providing a level of detail and assurance beyond that which is typically given by the vendor.
The DCMS (Department for Digital, Culture, Media and Sport) has introduced 13 principles as guidelines for device manufacturers. In this episode we discuss the DCMS approach to security issues in internet connected devices and look at other standards in the industry., We also look at what the real-world implications of legislation are, whether increased market regulation will help and what courses of action should be taken by governments, industry bodies, manufacturers and consumers.
As the medical device market grows fuelled by COVID-19, and with the increased need for telemedicine, in this episode we look at the programme of security around these devices across their lifecycle including support. More organisations are moving into this space, including many start-ups and new businesses with less mature cyber security postures. EU legislation may potentially be introduced to drive an increased focus on security - but where are we now?
As organisations continue to expand, the cloud provides an unparalleled solution to their software and infrastructure dilemma. However, relying heavily on new technology that is not fully understood has left many organisations open to new threats. In this episode we discuss why the cloud is so popular nowadays, some of the potential dangers that it brings, and stories of cloud gone wrong.
One of the key exposures to an organisation is connectivity into the environment from third-party networks and employees. It is critical to understand your organisation’s exposure to thirdparties and potential malicious insiders with authorised access to your network, as well as how a breach to a third-party could impact your network.