2017 Innovation Awards: Chubb Online Cyber Security EducationReprints
CYBER SERVICES FOR LOSS MITIGATION: ONLINE CYBER SECURITY EDUCATION
Many data network outages occur because employees “don’t know how to respond when something happens,” when knowing how to do so “will help reduce the exposure to a loss when an incident occurs,” said Russ Cohen, Chubb Ltd.’s Philadelphia-based vice president for cyber services.
Chubb’s Cyber Services for Loss Mitigation: Online Cyber Security Education program, a 2017 Business Insurance Innovation Awards winner, is intended to help employees avoid the errors that can have a significant impact when data is lost, stolen or becomes unavailable, Mr. Cohen says.
There are two courses in the program, which is available to Chubb cyber insurance policyholders. The first, which can be viewed in 20 to 30 minutes, educates on the “bare-bones basics” needed to identify potential threats, including protecting sensitive information and “how to escalate issues to the right individuals within the organization when necessary,” said Mr. Cohen.
The second course, which runs 30 to 40 minutes, is intended for individuals within the organization with “access to higher amounts of sensitive information.” It “provides additional, more technical guidance and education,” including information on laws and regulations and the “more advanced cyber threats out there,” Mr. Cohen said.
“The courses have been designed so they’re quick to take. We didn’t want to do something that’s intrusive,” said Mr. Cohen. In addition, Chubb “made it easy to set up and deploy,” with less than a couple of minutes needed to reach the site, register and gain access to the courses, he said.
Chubb also wanted to make this a good experience for risk managers, Mr. Cohen said.
“They also can go to the portal and generate reports on who has taken and not taken the course, and can use it to improve their own internal security programs, or track people who have taken the course,” he said.
The program was introduced in December 2016. “So far, the response in the marketplace has been really good,” Mr. Cohen said.
He said some policyholders have liked the course so much they have used it to supplement their existing cyber awareness programs.
The program will evolve, said Mr. Cohen. Over time, it will be revised to add information on new cyber threats, including one being planned on ransomware, he said.