Cyber Attacks and Cyber Insurance

[JATSO]

Hi all,

 

We use Smoothwall and Eset as our protection solution, I have been asked by one of the finance directors how many cyber attacks we have had?

 

Can we even retrieve that sort of info is my first question?

 

They are probably looking at Cyber Insurance and whether it is worth having or all just another money maker for the insurance companies, it won't be my decision as to have or not have but I been asked if I can retrieve info on whether we have been attacked or not? from our current set up?

 

Any info would be appreciated.

 

Thanks

[synaesthesia]

My first question to them would be what gibberish have they been listening to or reading in the Daily Mail, and what insurance company that have links with and haven't put it on their Register of Interests, but then I'm a cynical old git

 

You would/should have a record of any known attacks, but "cyber attack" is a very broad term describing many things, external hacks, internal issues, policy issues, DDoS attacks; many of these however will be mitigated by external sources and you may never even know about them.

[JATSO]

My first question to them would be what gibberish have they been listening to or reading in the Daily Mail, and what insurance company that have links with and haven't put it on their Register of Interests, but then I'm a cynical old git

 

You would/should have a record of any known attacks, but "cyber attack" is a very broad term describing many things, external hacks, internal issues, policy issues, DDoS attacks; many of these however will be mitigated by external sources and you may never even know about them.

 

They were my initial thought as i am also cynical old git as well

 

Is anything retrievable from Smoothwall or would I have to approach our ISP who also provide our Smoothwall?

 

Thanks

[synaesthesia]

Only if Smoothwall is also your firewall. ISP would be first port of call though but thats only going to be for ddos. Data breaches could easily go unnoticed, it may have happened or not, you'd not really be able to find out unless a stranger walks in with a USB stick full of personal data. You'd need to provide your policies, assurance of encyption for data that leaves site etc.

[JATSO]

Only if Smoothwall is also your firewall. ISP would be first port of call though but thats only going to be for ddos. Data breaches could easily go unnoticed, it may have happened or not, you'd not really be able to find out unless a stranger walks in with a USB stick full of personal data. You'd need to provide your policies, assurance of encyption for data that leaves site etc.

 

Thanks I will ask.

 

Appreciate you time.