July 01, 2024

Spotlight on Cyber Insurance

Cyber Insurance: What It Is, How It Works and Why You Need It

Every 40 seconds, a cyberattack occurs somewhere in the world. In the average time it takes to read this article, 10 to 15 attacks will have happened on global networks and servers. That equates to 2,220 global attacks per day, according to Security Magazine1. That’s more than 800,000 a year.

Not only is the frequency of attacks on the rise, so is the cost. IBM estimated the average global cost of a data breach to be $4.45 million2. That marked a 15% increase over three years.

The damage adds up quickly. Victims of cyberattacks incur many of the following expenses:

  • Infrastructure damage;
  • Incident communication to clients, employees and stakeholders;
  • Identity restoration for impacted parties;
  • Network interruption;
  • Lost revenue;
  • Inability to fulfill contracts;
  • Security enhancements;
  • Litigation costs and attorney fees;
  • Regulatory penalties;
  • Loss of intellectual property and clients;
  • Ransom payments to hackers.

Big or Small, Hackers Attack All

The IBM report also noted the financial sector ranked second in sustaining damage from attacks. Only health care suffered more. Accounting Today reported a 300% increase in cyberattacks on accounting firms3 since the start of the COVID-19 pandemic in 2020.

Hackers target accounting firms of all sizes. The following incidents have occurred.

Last year, three of the Big Four accounting firms were among 500 targets of a global ransomware attack4In November 2022, a Minnesota accounting firm with 270 employees suffered a breach5 that compromised Social Security numbers and other sensitive data. Last year, Accounting Today6 reported a malware attack on a small CPA firm in Georgia. An employee clicked a malicious link, encrypting the firm’s data. They paid a $450,000 ransom to recover their files.

Most small and medium-sized businesses could only survive for a week7 if they suffered a severe cyberattack. Accounting firms no longer have to assume all of the risk.

How Cyber Insurance Works

Cyber insurance, also known as cyber risk or cyber liability insurance, is a fairly new type of standalone policy covering losses from cyberattacks, including breaches or losses of confidential information.

Firms can recover some or all costs from a cyberattack, depending on the policy terms. This insurance requires regular premium payments, and firms can file a claim with the insurer if their network or digital assets are attacked.

A typical cyber insurance policy provides coverage in the following four key areas.

Incident Response covers the costs of dealing with a cyber incident, including forensic investigations, data recovery, legal advice, notification expenses, and public relations efforts.

Business Interruption aids businesses in recovering financial losses from cyber incidents that disrupt normal operations, such as ransomware attacks that shut down critical systems or data breaches causing downtime.

Cybercrime coverage protects businesses from financial losses due to cybercrimes, including social engineering scams, fraudulent wire transfers, funds transfer fraud, and extortion.

Privacy Liability helps businesses cover costs related to legal fees, settlements and damages resulting from data breaches or other privacy incidents that expose sensitive customer or employee information.

Standalone vs. Endorsements

Cyber coverage is often added as a rider to business or property insurance policies. However, these endorsements don’t offer the extensive protection and higher coverage limits of standalone cyber policies. A dedicated cyber insurance policy provides broader coverage for the risks CPAs face, including both first-party and third-party attacks.

First-party and Third-party Coverage

First-party attacks target an accounting firm’s network directly, while third-party attacks occur through another party, such as a client or vendor.

Cybercriminals are not unlike a run-of-the-mill burglar, who continuously searches for weak entry points. In the cyberworld where everything is connected by a network of wires, servers and clouds, a firm’s most vulnerable point is often a third party’s network.

Third-party coverage is crucial for CPAs, as hackers can use breached firm data to target clients, causing financial harm. This coverage helps with attorney costs to defend the firm, crisis management and public relations, settlement costs, court-ordered damages if the firm is found liable, regulatory inquiry responses, and government fines and penalties.

How Coverage is Underwritten

The higher the risk to the insurer, the higher the cost. Cyber insurance carriers evaluate risk based on the following factors.

Industry. High-risk industries like health care, legal and financial services are prime targets due to the sensitive data they store.

Company size. Larger companies have more network entry points.

Annual revenue. Higher revenue makes a company a bigger target for cybercriminals, especially for ransomware attacks. Revenue also indicates the potential financial impact of a breach.

Strength of security measures. Cyber insurance companies assess a company’s security measures, including:

  • Enforcement of MFA, encryption, patch management, backups, email filtering, and endpoint protection;
  • Secondary communication methods for validating fund transfers;
  • Document retention and disposal policies;
  • Access controls and password requirements;
  • Security testing procedures;
  • Effectiveness of employee cybersecurity training programs.

The Benefits of Buying Group Coverage

Due to rising risks and claims, cyber insurance premiums have surged. Purchasing coverage through a professional association like TXCPA can benefit members in a number of ways:

  • Competitive pricing;
  • Expert advice;
  • Access to multiple carriers, including A+ rated insurers;
  • Free, personalized risk assessments.

Click here to learn more about the TXCPA-endorsed cyber liability insurance plan.

A Vital Tool

Cyber insurance is a vital tool for accounting firms to protect themselves from the potential financial and reputational impacts of cyberattacks. Accounting firms should evaluate their cyber risk exposure, compare different cyber options and select the policy that best suits their needs and budget. By doing so, firms can enhance their cyber resilience, confidence and competitiveness in the digital age.

Why choose the TXCPA Member Insurance Program?

  • Coverage designed for professionals and their families.
  • Exclusive member rates from top-rated carriers.
  • Your participation supports the mission of the Texas Society of CPAs.
  • Learn more at txcpainsure.org or call us at 800-428-0272.

Protect What Matters Most with TXCPA Member Insurance

Safeguard your family, property and career with TXCPA Member Insurance. Our association-endorsed insurance offers value and reliability you can trust.

Footnotes

1. Fox, Jacob. “Top Cybersecurity Statistics for 2024.” Cobalt, Dec. 8, 2023. www.cobalt.io/blog/cybersecurity-statistics-2024

2. Cost of a Data Breach Report 2023. IBM, Overview Page. Referenced on May 9, 2024. www.ibm.com/reports/data-breach

3. Salman, Gary. “The rise of cybercrime in the accounting profession continues.” Accounting Today, Aug. 24, 2020. The rise of cybercrime in the accounting profession continues

4. Schappert, Stefanie. “Deloitte joins fellow Big Four MOVEit victims PWC, EY.” Cybernews, Nov. 15, 2023. https://cybernews.com/security/deloitte-big-four-moveit-pwc-ey-clop/

5. Phillips Erb, Kelly. “Big Four Accounting Firm Deloitte Confirms Cyber Attack. Forbes, Sept. 26, 2017.

6. Kelly, Sav. “Brady Martz & Associates faces four class-action complaints for 2022 data breach.” Grand Forks Herald, accessed from Yahoo!, Sept. 23, 2023.

7. Gaetano, Chris. “Cybersecurity for CPAs: One expensive click.” Accounting Today, April 12, 2023. www.accountingtoday.com/list/cybersecurity-for-cpas-one-expensive-click

 

Thanks to the Sponsors of Today's CPA Magazine

This content was made possible by the sponsors of this issue of Today's CPA Magazine:

 
Accounting Biz Brokers Accounting Practice Sales CPA Charge Goodman Financial PAS.Professional Accounting Sales Poe Group Advisors

 

  • Assessing AI From a Tax Perspective, Part 1

    The article evaluates the potential use and limitations of AI in addressing tax-related queries during tax season. While AI tools show promise for aiding tax professionals and easing the CPA shortage, their responses are often inaccurate or misleading. The technology can assist with basic tasks, but it is not yet reliable enough to replace the educated judgment of tax professionals.
    View Article
  • CPE: Goodwill and Unit of Accounting

    This article provides an in-depth analysis of goodwill accounting under ASC 350, which defines goodwill as the excess payment over the fair value of acquired assets in a business combination. It covers the complexity of goodwill accounting, its significant financial implications and the importance of informed management judgment in acquisitions.
    View Article
  • What’s Happening Around Texas - January-February 2025

    November's Service Month and Career Awareness Month showcased our members' dedication to making a difference, highlighting their meaningful community impact. Through charitable efforts, educational outreach and career awareness initiatives, their collective generosity was a bright light for the accounting profession.
    View Article
  • The Impact of State Sales Tax Law on Federal Income Tax Returns for Businesses

    State sales tax rules impact federal income tax reporting for businesses operating in multiple states. Proper reporting is crucial to avoid audit risks and ensure compliance with gross receipts thresholds, which can influence tax methods and deductions. Tax practitioners should align financial accounting and tax reporting practices to minimize discrepancies and simplify compliance.
    View Article
  • Communicating with Senior Clients

    Recognizing typical age-related changes and making small adjustments can enhance how CPAs communicate with senior clients. Communication differences are not all related to a person’s generation category. The recommendations in this article draw from research and years of professional practice, as well as personal experience.
    View Article
  • Critical Timing for Licensure Discussions in Texas

    The new year brings a new legislative session in Texas. TXCPA will be advocating for important developments that directly impact your profession and the future of the CPA pipeline in Texas. We encourage you to stay engaged with us as the session progresses.
    View Article
  • Proposed Two-Track Path to a CPA License is Getting Serious Consideration

    A proposed two-track path to CPA licensure aims to address the shrinking pool of potential new entrants into the accounting profession. Traditionally, CPA licensure requires passing the Uniform CPA Exam, completing 150 semester hours of education and completing supervised work experience.
    View Article
  • Spotlight on CPAs: Shristi Upreti Sharma

    TXCPA member Shristi Upreti Sharma discusses her career journey, sharing key milestones and valuable lessons for aspiring CPAs. Passionate about accounting from a young age, she has actionable advice for students pursuing the CPA path, highlighting dedication, strategic planning, mentorship and resilience as essential elements for success.
    View Article
  • Government Affairs: Hold on Tight! Big Changes in the Accounting Profession for 2025

    The 89th Texas Legislative Session begins January 14, 2025, where there will be debates on property taxes, water resources, infrastructure, school choice, and CPA licensing reforms. Key bills for the accounting profession are SB 262 and HB 1757 that include proposals for an alternative CPA licensure pathway, and SB 522 that includes mobility protections. TXCPA will actively advocate for these and other measures.
    View Article
  • FASB’s New ASU 2024-03: Another Step Toward Greater Transparency in Financial Reporting

    The Financial Accounting Standards Board (FASB) issued ASU 2024-03 on November 4, 2024, to enhance financial reporting transparency by mandating more detailed expense disclosures in financial statements. This update, shaped by investor feedback during FASB’s 2021 agenda consultation, aims to help investors better assess a company’s performance, cash flow prospects and industry standing.
    View Article
  • Driving Strategic Growth: ASC 280 Segment Reporting Disclosure Fuels Investor Insight

    Updates to ASC 280 require public companies to disclose detailed segment-level financial data to meet growing investor demands for more insights. Implementing these changes involves identifying operating segments, ensuring data readiness and maintaining compliance with reporting standards. Enhanced transparency will help build investor confidence and support sustainable growth in a competitive, evolving market.
    View Article
  • TXCPA Thanks Our 2024-2025 Professional Group Membership Program Participants!

    TXCPA thanks the firms and companies that participated in our 2024-2025 Professional Group Membership program for membership renewals and new member activations. With our streamlined group billing option, renewing memberships is a breeze, while offering your team added value and benefits!
    View Article
  • Take Note

    In this edition of Take Note: Advocacy Day and Midyear Leadership Council Meeting; TXCPA's 2025 CPE Programs; Clarification for Today's CPA Article on Mitigating Medicare Mistakes; Printable Physical Wellness Checklist; Secure Your Future with Member Insurance; TXCPA's Career Center; Management Accountants - Stand Out With the CGMA® Designation
    View Article
  • Classifieds

    The classified ad section features listings for practice owners looking to sell, professionals seeking firms to purchase and a variety of specialized services. Whether you're looking to expand, sell or explore niche opportunities, this section connects professionals with valuable business prospects and resources.
    View Article

CHAIR
Mohan Kuruvilla, Ph.D., CPA

PRESIDENT/CEO
Jodi Ann Ray, CAE, CCE, IOM

CHIEF OPERATING OFFICER
Melinda Bentley, CAE

EDITORIAL BOARD CHAIR
Jennifer Johnson, CPA

MANAGER, MARKETING AND COMMUNICATIONS
Peggy Foley
pfoley@tx.cpa

MANAGING EDITOR
DeLynn Deakins
ddeakins@tx.cpa

COLUMN EDITOR
Don Carpenter, MSAcc/CPA

DIGITAL MARKETING SPECIALIST
Wayne Hardin, CDMP, PCM®

CLASSIFIEDS
DeLynn Deakins

Texas Society of CPAs
14131 Midway Rd., Suite 850
Addison, TX 75001
972-687-8550
ddeakins@tx.cpa

 

Editorial Board
Derrick Bonyuet-Lee, CPA-Austin;
Aaron Borden, CPA-Dallas;
Don Carpenter, CPA-Central Texas;
Rhonda Fronk, CPA-Houston;
Aaron Harris, CPA-Dallas;
Baria Jaroudi, CPA-Houston;
Elle Kathryn Johnson, CPA-Houston;
Jennifer Johnson, CPA-Dallas;
Lucas LaChance, CPA-Dallas, CIA;
Nicholas Larson, CPA-Fort Worth;
Anne-Marie Lelkes, CPA-Corpus Christi;
Bryan Morgan, Jr, CPA-Austin;
Stephanie Morgan, CPA-East Texas;
Kamala Raghavan, CPA-Houston;
Amber Louise Rourke, CPA-Brazos Valley;
Shilpa Boggram Sathyamurthy, CPA-Houston, CA
Nikki Lee Shoemaker, CPA-East Texas, CGMA;
Natasha Winn, CPA-Houston.

CONTRIBUTORS
Melinda Bentley; Kenneth Besserman; Kristie Estrada; Holly McCauley; Craig Nauta; Kari Owen; John Ross; Lani Shepherd; April Twaddle; Patty Wyatt

 

Your TXCPA membership has not been renewed for 2024 -2025. Renew now.