Energy Companies Can't Get Cyber Attack Insurance Because Their Defenses Are Too Weak

Future Tense
The Citizen's Guide to the Future
Feb. 28 2014 11:02 AM

Energy Companies Can't Get Cyber Attack Insurance Because Their Defenses Are Too Weak

Lloyd's of London won't gamble on insuring energy companies against cyber attacks yet.

Photo by Matt Cardy/Getty Images

Lloyd's of London, insurer of celebrity body parts, is so concerned about digital security at energy companies that it won't sell most of them insurance, even though there is a growing demand.

Lily Hay Newman Lily Hay Newman

Lily Hay Newman is lead blogger for Future Tense.

BBC News reports that Lloyd's underwriters are getting more and more requests for cyber attack insurance from energy groups, but the insurer is unwilling to take the risk after assessing the companies' defenses. That means that the protections currently in place by energy companies must be horribly inadequate, because Lloyd's is known for finding ways to insure pretty much anything, even high-risk ventures like oil tankers.


The idea of cyber attack insurance is pretty simple. Like any other disaster that a company might need to recover from, a data breach or other type of attack could create major financial problems, and cyber attack insurance would help soften the blow. In fact, Laila Khudari, an underwriter at a Lloyd's of London syndicate, told BBC News that Lloyd's has negotiated cyber attack insurance with energy companies in the past, but that they aren't qualifying for the multimillion-dollar policies they want now because the defenses they have in place aren't adequate, which has already been reported in other contexts.

For example, the Council on Foreign Relations released a report in June 2013 describing how U.S. oil and natural gas companies weren't defending themselves adequately against cyber attacks. The report warned that this could potentially lead to pipeline outages or problems at refineries and drilling platforms. It noted that:

Several of the world's major oil and gas producers, including Saudi Aramco (officially the Saudi Arabian Oil Company) and Qatar's RasGas, have fallen victim to cyberattacks since 2009. Others, such as Chevron, have also had their networks infected.

When assessors look at the companies' IT strategies for implementing firewalls, updates, and other network maintenance, most come up short. BBC News reports that it's not totally clear what has prompted the surge in interest for this type of insurance. Though the huge retailer hacks in the U.S. and the endless revelations about government surveillance on both sides of the Atlantic could be, you know, contributing factors. Or whatever.

Even given that the companies' concerns are justified, Khudari told BBC News, "We would not want insurance to be a substitute for security." And that's a really good point.

Future Tense is a partnership of SlateNew America, and Arizona State University.



Smash and Grab

Will competitive Senate contests in Kansas and South Dakota lead to more late-breaking races in future elections?

Stop Panicking. America Is Now in Very Good Shape to Respond to the Ebola Crisis.

The 2014 Kansas City Royals Show the Value of Building a Mediocre Baseball Team

The GOP Won’t Win Any Black Votes With Its New “Willie Horton” Ad

Sleater-Kinney Was Once America’s Best Rock Band

Can it be again?


Forget Oculus Rift

This $25 cardboard box turns your phone into an incredibly fun virtual reality experience.

One of Putin’s Favorite Oligarchs Wants to Start an Orthodox Christian Fox News

These Companies in Japan Are More Than 1,000 Years Old

Trending News Channel
Oct. 20 2014 6:17 PM Watch Flashes of Lightning Created in a Lab  
  News & Politics
Oct. 20 2014 8:14 PM You Should Be Optimistic About Ebola Don’t panic. Here are all the signs that the U.S. is containing the disease.
Oct. 20 2014 7:23 PM Chipotle’s Magical Burrito Empire Keeps Growing, Might Be Slowing
Oct. 20 2014 3:16 PM The Catholic Church Is Changing, and Celibate Gays Are Leading the Way
  Double X
The XX Factor
Oct. 20 2014 6:17 PM I Am 25. I Don't Work at Facebook. My Doctors Want Me to Freeze My Eggs.
  Slate Plus
Tv Club
Oct. 20 2014 7:15 AM The Slate Doctor Who Podcast: Episode 9 A spoiler-filled discussion of "Flatline."
Brow Beat
Oct. 20 2014 9:13 PM The Smart, Talented, and Utterly Hilarious Leslie Jones Is SNL’s Newest Cast Member
Oct. 20 2014 11:36 PM Forget Oculus Rift This $25 cardboard box turns your phone into an incredibly fun virtual-reality experience.
  Health & Science
Medical Examiner
Oct. 20 2014 11:46 AM Is Anybody Watching My Do-Gooding? The difference between being a hero and being an altruist.
Sports Nut
Oct. 20 2014 5:09 PM Keepaway, on Three. Ready—Break! On his record-breaking touchdown pass, Peyton Manning couldn’t even leave the celebration to chance.