Small businesses can still have significant cyber exposures.
A business does not need to be large or hold millions of records to experience a costly cyber incident.
What can create a cyber exposure? #
Examples include businesses that:
- Use email
- Store client information
- Store employee information
- Use cloud software
- Make or receive electronic payments
- Allow remote work
- Depend on computers or connected systems
- Use external IT providers
- Hold commercially sensitive information
What incidents can affect a small business? #
Examples include:
- Business email compromise
- Fraudulent invoices
- Altered payment instructions
- Ransomware
- Stolen credentials
- Unauthorised system access
- Accidental disclosure of personal information
- Data loss
- Incidents affecting third-party technology providers
Using cloud systems or outsourcing IT support does not remove the business’s exposure.
Depending on the policy, Cyber Insurance can assist with matters such as:
- Incident response
- Forensic investigation
- Data restoration
- Legal assistance
- Notification costs
- Business interruption
- Certain third-party claims
Cover remains subject to policy terms, security requirements, exclusions, excesses and limits.
Contact our team if you would like help reviewing your small business cyber exposure.

