Considering the growing shift towards online business operations, it's becoming increasingly vital for small and medium-sized businesses to prioritize cyber security. Here are ten tips to enhance your business&rsquo; cyber security:

10 tips to enhance your business’s cyber security

<div>
<div>With a rapid increase of telecommuting, follow these tips to help reduce threats.</div>
</div>

7 Tips to Protect your Business from the Risks of Remote Employees

Follow these&nbsp;five&nbsp;tips&nbsp;to&nbsp;help&nbsp;strengthen&nbsp;your company&rsquo;s cyber defences, protect&nbsp;your employees from receiving malicious content and toughen your defences with&nbsp;continually educating your employees about security best practices and scams.

5 ways to Bolster your IT Security Strategy with Employee Training

Technology and Cyber

Hot Topics

Managing Risk

Tip Sheet

About us

Diversity and Inclusion

Newsroom

Media Kit

Claims

Contact us

In a traditional industry like insurance, change can sometimes happen at a gradual pace. But there&rsquo;s one emerging technology many businesses might be wise to move quickly on: Generative AI.
Hailed as a transformative force in business, Generative AI (GenAI) refers to deep-learning models that can generate high-quality text, images and other content based on the data they were trained on.1 While GenAI&rsquo;s roots trace back to the early days of artificial intelligence in the 1950s, the technology burst on the public scene in 2022, when OpenAI launched a consumer-facing GenAI tool called ChatGPT.2
In the insurance sector, experts say GenAI is &ldquo;fundamentally reshaping everything from underwriting and risk assessment to claims processing and customer service.&rdquo; More specifically, GenAI tools &ldquo;have the potential to automate processes, enhance customer experiences and streamline claims management, ultimately driving efficiency and effectiveness across the industry.&rdquo;3
In the Canadian Underwriter 2024 National Broker Survey, sponsored by Sovereign Insurance, brokers were asked how beneficial certain changes or investments have been in their organizations. Just over a fifth (21%) of respondents said using artificial intelligence and machine learning tools such as ChatGPT have been highly beneficial to them. Brokers were also asked how beneficial certain investments and actions have been for strengthening their business. Twenty-two percent of brokers indicated AI and machine learning tools have been highly beneficial on that front.&nbsp;
While it&rsquo;s still early days for generative AI, there&rsquo;s no doubt brokers and carriers alike are thinking about how they can harness the power of GenAI across their operations. Here&rsquo;s a look at a few key areas where the sector can leverage AI.&nbsp;
Claims management: For carriers, one promising application is in claims management, says Ricky Chan, Senior Solution Architect at Sovereign Insurance. &ldquo;Generative AI can help automate claims processing and assessment, which in turn increases adjusters&rsquo; productivity, allowing them to focus their expertise on more complex claims,&rdquo; he says.&nbsp;
Underwriting: GenAI can also help inform underwriting decisions. As Accenture notes, the technology highlights risk control analysis insights to show loss prevention measures in place and the effectiveness of those controls. Generative AI can generate a comprehensive narrative of the overall risk and its alignment to the carrier&rsquo;s appetite and book, as well as identify and source missing data.4
Submissions: For brokers, GenAI has a variety of promising use cases, such as submission preparation and client Q&amp;As. According to Accenture, the effort required to identify adequate coverage and prepare submissions can be dramatically reduced through GenAI. Specifically, the technology can prompt the broker on the types of questions they should ask based on what is known about the insured, the industry the insured operates in, and the risk profile of the insured&rsquo;s company compared to others. In addition, GenAI could identify potentially overlooked up-sell or cross-sell opportunities.5
Information and knowledge: For any company, GenAI can make day-to-day work life easier by performing administrative tasks and knowledge gathering, an area that Sovereign is currently exploring. &ldquo;There are substantial positive impacts to day-to-day operations, such as summarizing information and meeting minutes, intelligent information search and ease of access of information,&rdquo; says Ricky.&nbsp;
Chad Hunter, Vice-President, Information Technology at Sovereign Insurance, adds that Sovereign &ndash; like many companies &ndash; uses a handful of different platforms and domains, including e-mail, OneDrive, SharePoint and Microsoft Teams. By using a natural language chatbot or co-pilot tool, the company&rsquo;s knowledge and data could be streamlined. For example, &ldquo;instead of underwriters having to go to several different spots looking for knowledge, they could use the chatbot&hellip; and behind the scenes, that generative AI model will go to all the different areas and provide real-time responses,&rdquo; explains Chad.&nbsp;
What&rsquo;s next for GenAI? Beyond just talking about the possibilities of the technology, many companies in the insurance space &ndash; Sovereign included &ndash; are now testing and learning. Looking ahead, Deloitte notes that as generative AI moves from possibilities to practicalities, choosing the right use cases, selecting appropriate tools, getting to scale, and accurately measuring progress will all be important steps.6

Sources&nbsp;
1 IBM, &ldquo;<a href="https://research.ibm.com/blog/what-is-generative-AI">What is generative AI?</a>&rdquo; April 20,2023 2 Medium, &ldquo;<a href="https://matthewdwhite.medium.com/a-brief-history-of-generative-ai-cb1837e67106">A Brief History of Generative AI</a>,&rdquo; Jan. 7, 2023 3 EY, &ldquo;<a href="https://www.ey.com/en_us/insights/insurance/how-insurers-can-leverage-the-power-of-generative-ai">How insurers can leverage the power of generative AI</a>,&rdquo; Aug. 28, 2023 4 Accenture, &ldquo;<a href="https://insuranceblog.accenture.com/3-ways-insurance-underwriters-gain-insights-generative-ai">3 ways insurance underwriters can gain insights from generative AI</a>,&rdquo; March 21, 2024 5 Accenture, &ldquo;<a href="https://insuranceblog.accenture.com/5-key-generative-ai-use-cases-in-insurance-distribution">5 key generative ai use cases in insurance distribution</a>,&rdquo; Feb. 13, 2024 6 Deloitte, &ldquo;<a href="https://www2.deloitte.com/content/dam/Deloitte/us/Documents/consulting/us-state-of-gen-ai-report-q2.pdf">Now decides next: Getting real about Generative AI</a>,&rdquo; April 2024

Why the insurance sector should keep step with GenAI 

Even the most advanced technologies and significant investments in cybersecurity can&rsquo;t fully protect businesses from a major cyber risk: their own employees.
In the 2024 Voice of the CISO report by cybersecurity firm Proofpoint, 74% of survey respondents said human error is their most significant risk when it comes to cyberattacks. This finding is echoed in a 2023 study by Verizon, which found that human error is indeed a factor in 74% of total breaches, despite ongoing efforts by enterprises to strengthen their defences and increase training in cybersecurity.1,2
Employee training can fall short for several reasons: distractions in the workplace, a lack of awareness about the critical role employees play as the first line of defence, and the challenge of staying on top of the evolving threat landscape, to name a few.3
Small- and medium-sized businesses (SMBs) face an even bigger challenge: They might not have the resources to conduct employee training in the first place, relying instead on third parties to support their security measures. This can be a costly mistake.
Despite the perception that cybercriminals only target large corporations, certain types of attacks, such as social engineering, are more frequently aimed at small businesses. These companies are typically not financially prepared for an attack, and it could even put them out of business. According to IBM&rsquo;s 2023 Cost of a Data Breach Report, the average cost of a data breach on organizations with fewer than 500 employees is US$3.31 million.4,5
<h4>Simple steps for employee training in SMBs</h4>
While it may not be feasible for SMBs to regularly conduct extensive employee training sessions, mitigation strategies don&rsquo;t have to be complex. There are simple and cost-effective measures that can be easily understood and adopted, making it possible for SMBs to strengthen their cybersecurity efforts.
Make employees aware of the critical role they play: First and foremost, employees must understand the &ldquo;why.&rdquo; According to a 2023 survey by the Insurance Bureau of Canada, many employees underestimate the role they play in being cyber safe at work and the impact of potential cyberattacks on their employer. Nearly half (47%) believe technology plays more of a role in protecting their workplace from cyber threats than they do; 30% believe their employer is solely responsible for protecting the organization from cyber threats; and 31% do not believe cyber criminals would target them.6
Whether it&rsquo;s in the form of interactive workshops or channels like emails and posters, employers should regularly communicate security awareness to staff. When they are aware of the importance of cybersecurity and their role in safeguarding their company, employees are more likely to take this issue seriously and report suspicious activities.7,8
Educate employees about common and evolving threats: Educating staff about different types of cyberattack, how to spot them, and how to respond to them is crucial for protecting against breaches. Recognizing phishing tactics, for example, includes identifying suspicious emails, unusual requests, and fake websites. Staff should also be clear on who to contact if they encounter a suspicious message. In a social engineering attack, cybercriminals may mimic the writing style of a CEO to trick an employee into sending money. In this case, businesses should have dual controls in place, meaning a second person should verify the request.9,10
As part of awareness training, SMBs can take advantage of free online resources, such as webinars, toolkits, articles and e-learning courses from cybersecurity organizations like the <a href="https://www.cyber.gc.ca/en/small-medium-businesses" target="_blank" rel="noopener">Canadian Centre for Cyber Security</a> and the <a href="https://www.unb.ca/cic/webinars.html" target="_blank" rel="noopener">Canadian Institute for Cybersecurity</a>, the Government of Canada&rsquo;s <a href="https://www.getcybersafe.gc.ca/en/resources/get-cyber-safe-guide-small-businesses#C7" target="_blank" rel="noopener">Get Cyber Safe</a> platform, as well as cybersecurity firms.
Other ways to keep employees informed are through newsletters with tips, news about recent threats and best practices; informal lunch-and-learn lessons where employees can share news and insights; and a database or guidebook where employees can stay up to date on the latest threats and find answers to their cybersecurity questions.11,12,13
Nurture a cybersecurity culture: A strong culture of cybersecurity &ndash; meaning it&rsquo;s entrenched in the company&rsquo;s values &ndash; is essential. SMBs should lead by example, showing the company is committed to cybersecurity at all levels. This makes employees more likely to follow suit. Since employee engagement is a key element of building a cybersecurity culture, business leaders should also recognize and reward employees who demonstrate good practices.14
Another way to build a strong cybersecurity culture is to speak employees&rsquo; language. Experts advise communicating in plain language, avoiding technical jargon and focusing on practical advice employees can use daily. For example, rather than using the term &ldquo;multi-factor authentication,&rdquo; they can explain there is an extra layer of security when logging in.15
Additionally, fostering open communication and a &ldquo;no-blame culture&rdquo; is essential. Employees should feel comfortable asking questions, reporting suspicious emails and voicing concerns without fear of reprisal.16
While SMBs may face resource constraints, the cost of not investing in cybersecurity &ndash; even in the simplest of ways &ndash; is far greater. By prioritizing employee awareness and creating a strong cybersecurity culture, businesses can turn their weakest link into their strongest line of defence.
&nbsp;
&nbsp;
Sources
1 Proofpoint, &ldquo;<a href="https://www.proofpoint.com/us/newsroom/press-releases/proofpoints-2024-voice-ciso-report-reveals-three-quarters-cisos-identify" target="_blank" rel="noopener">Proofpoint&rsquo;s 2024 Voice of the CISO Report Reveals that Three-Quarters of CISOs Identify Human Error as Leading Cybersecurity Risk</a>,&rdquo; May 21, 2024
2 Verizon, &ldquo;<a href="https://www.verizon.com/about/news/2023-data-breach-investigations-report" target="_blank" rel="noopener">2023 Data Breach Investigations Report: frequency and cost of social engineering attacks skyrocket</a>,&rdquo; June 6, 2023
3 Skillsoft, &ldquo;<a href="https://www.skillsoft.com/blog/why-security-training-fails-and-how-to-fix-it" target="_blank" rel="noopener">Why Security Training Fails And How To Fix It</a>,&rdquo; June 3, 2022
4 &nbsp;StrongDM, &ldquo;<a href="https://www.strongdm.com/blog/small-business-cyber-security-statistics" target="_blank" rel="noopener">35 Alarming Small Business Cybersecurity Statistics for 2024</a>,&rdquo; Feb. 1, 2024
5 Business.com, &ldquo;<a href="https://www.business.com/articles/smb-budget-for-cybersecurity/" target="_blank" rel="noopener">The Cost of Cybersecurity and How to Budget for It</a>,&rdquo; Aug. 13, 2024
6&nbsp; Insurance Bureau of Canada, &ldquo;<a href="https://www.ibc.ca/news-insights/in-focus/ibcs-research-suggests-business-owners-and-employees-could-be-putting-their-organizations-at-risk" target="_blank" rel="noopener">Are you cyber savvy? IBC&rsquo;s research suggests business owners and employees could be putting their organizations at risk</a>,&rdquo; Nov. 6, 2023
7 LinkedIn, &ldquo;<a href="https://www.linkedin.com/advice/1/you-need-communicate-security-awareness-your-ob68f" target="_blank" rel="noopener">You need to communicate security awareness to your employees. What are some effective ways?</a>&rdquo;
8 FasterCapital, &ldquo;<a href="https://fastercapital.com/content/Train-your-employees-on-cybersecurity.html#The-Importance-of-Cybersecurity-Training-for-Employees" target="_blank" rel="noopener">Train your employees on cybersecurity</a>,&rdquo; June. 4, 2024
9 Pure IT, &ldquo;<a href="https://www.pureit.ca/five-ways-small-businesses-can-stop-a-cyber-breach-from-ever-happening/" target="_blank" rel="noopener">Five Ways Small Businesses Can Stop A Cyber Breach From Ever Happening</a>&rdquo;
10 Teal, &ldquo;<a href="https://tealtech.com/blog/cybersecurity-awareness-training-for-employees/" target="_blank" rel="noopener">5 Ways to Promote Employee Cybersecurity Awareness Training</a>,&rdquo; July 25, 2024
11 Mitnick Security, &ldquo;<a href="https://www.mitnicksecurity.com/blog/remote-security-tips" target="_blank" rel="noopener">Remote Security: 5 Cyber Security Tips for Employees and Businesses</a>,&rdquo; Feb. 22, 2024
12 The AME Group, &ldquo;<a href="https://www.theamegroup.com/headlines/engage-employees-to-increase-cyber-safety/" target="_blank" rel="noopener">Engage Employees To Increase Cyber Safety</a>&rdquo;
13 &nbsp;Compyl, &ldquo;<a href="https://compyl.com/blog/cybersecurity-awareness-training-for-small-business/" target="_blank" rel="noopener">Getting Started With Cyber Security Awareness Training for Small Business</a>,&rdquo; Sept. 5, 2024
14 Babylon Solutions, &ldquo;<a href="https://www.babylonsolutions.com/cybersecurity-guide-for-small-businesses-how-to-protect-your-company/" target="_blank" rel="noopener">Cybersecurity Guide for Small Businesses: How to Protect Your Company</a>,&rdquo; Oct. 7, 2024
15 SMB Solutions: &ldquo;<a href="https://www.smbsolutions.com.au/10-easy-steps-to-building-a-culture-of-cybersecurity-awareness/" target="_blank" rel="noopener">10 Easy Steps to Building a Culture of Cybersecurity Awareness</a>,&rdquo; Aug. 23, 2024
16 Tripwire, &ldquo;<a href="https://www.tripwire.com/state-of-security/cultivating-cybersecurity-culture" target="_blank" rel="noopener">Cultivating a Cybersecurity Culture</a>,&rdquo; Jan. 23, 2024

10 tips to enhance your business’s cyber security

10 tips to enhance your business’s cyber security

You may also like

Connect with us

Let's stay in touch