Cysurance Programme for
Sophos Customers in Australia
Cysurance Certification and Cyber Insurance

www.cysurance.com/sophos-au

Certification and Warranty Leads to Discounted Cyber Insurance Policies

Certified Cyber
Insurance Endorsements
First Party Expense for:• Business Interruption (FirstParty)• Digital Asset Destruction• Reputational Income Loss
• Cyber Extortion• Incident ResponseExpenses
Third Party Expense for:• Security and Privacy
Liability• Regulatory Defence andPenalties• Multimedia Liability• PCI Fines and Expenses

Cysurance has created the most inclusive,
affordable warranty and cyber insurance policies forAustralian Clients protected by Sophos Managed
Detection and Response (MDR) and Endpoint
solutions, providing safeguards from financial
expenses due to cyber incidents.
Cysurance’s cyber insurance policies cover: firstparty incident response, business interruption,
digital data recovery, cyber extortion, and thirdparty liability costs resulting from ransomware,social engineering and more.
Cyber insurance programs from Cysurance areprovided by the "Lloyds Syndicate," which offers
full limit coverage. This means that events likeransom attacks and incident response costs arecovered up to the policy's total limit.

* Business industry category restrictions may apply for Fixed-Rate cyber insurance. Contact Cysurance to clarify that your business qualifies.

www.cysurance.com/sophos-au

Traditional application and underwriting processes
are not required for Sophos MDR customers. Most
Sophos customers will immediately qualify fordiscounted access to high-quality cyber insurance
policies.
In the event of an incident, the extended
ransomware protection from Cysurance will
respond first.
If exhausted, the cyber insurance will extend
financial coverage up to the policy limit for
additional remediation expense, immediately
covering other security or business continuity
events.

Insurance Discounts For Sophos Customers
In recognition of Sophos solutions' proven record of reducing risk exposure

18-21%

33%

discount off standard pricefor Sophos Endpoint users

discount off standard pricefor Sophos MDR users

Recognition of additional
protections also available

Recognition of additional
protections also available

Learn more and apply: www.cysurance.com/sophos-au
Insurance offered by Cysurance, LLC. DE License 3000712359, and in Australia, through Howden Broking Group, LTD Insurance Brokers. Canopius is a marketing name used to refer tosubsidiaries providing insurance and related services. Insurance provided by Canopius Asia Pte Ltd. All products may not be available in all regions. This communication contains productsummaries only. Coverage is subject to the language of the policies as actually issued. Nothing herein should be construed as involving the sale, solicitation or negotiation of insurance or theprovision or offer of insurance services. EXCEPT AS OTHERWISE PROVIDED, THE POLICY ABOVE PROVIDES COVERAGE ONLY FOR THESE CLAIMS THAT ARE FIRST MADE DURING THE POLICYPERIOD AND REPORTED TO UNDERWRITERS DURING THE POLICY PERIOD OR AS OTHERWISE PROVIDED IN THE POLICY. DEFENSE COSTS ARE PART OF, AND NOT IN ADDITION TO, THE STATED
LIMIT OF LIABILITY.

www.cysurance.com/sophos-au

Extended Ransomware Protection Exclusively Available to Sophos MDR Customers

Example additional ransomware coverage inclusions:

AU$275K

AU$550K

AU$1.15M

AU$2.15M

AU$3.2M

AU$4.2M

AU$5.2M

Total Coverage

Total CoverageTotal Coverage

Total Coverage

Total Coverage

Total Coverage

Total Coverage$250K Cyber Policy+$25K additionalransomware
coverage$500K Cyber Policy+$50K additionalransomware
coverage$1M Cyber Policy+$150K additionalransomware
coverage$2M Cyber Policy+$150K additionalransomware
coverage$3M Cyber Policy+$200K additionalransomware
coverage$4M Cyber Policy+$200K additionalransomware
coverage$5M Cyber Policy+$200K additionalransomware
coverage

Learn more and apply: www.cysurance.com/sophos-au
Insurance offered by Cysurance, LLC. DE License 3000712359, and in Australia, through Howden Broking Group, LTD Insurance Brokers. Canopius is a marketing name used to refer tosubsidiaries providing insurance and related services. Insurance provided by Canopius Asia Pte Ltd. All products may not be available in all regions. This communication contains productsummaries only. Coverage is subject to the language of the policies as actually issued. Nothing herein should be construed as involving the sale, solicitation or negotiation of insurance or theprovision or offer of insurance services. EXCEPT AS OTHERWISE PROVIDED, THE POLICY ABOVE PROVIDES COVERAGE ONLY FOR THESE CLAIMS THAT ARE FIRST MADE DURING THE POLICYPERIOD AND REPORTED TO UNDERWRITERS DURING THE POLICY PERIOD OR AS OTHERWISE PROVIDED IN THE POLICY. DEFENSE COSTS ARE PART OF, AND NOT IN ADDITION TO, THE STATED
LIMIT OF LIABILITY.

www.cysurance.com/sophos-au

Certified Cyber Insurance
Cysurance Certified Cyber Insurance offers full coverage limits; incident response costs are covered up to the policy's totallimit. The policy also includes special endorsements that cover bricking of devices and betterment enhancements, whichallows for upgrading hardware and systems to current-day standards following a breach.

Certified Cyber Insurance Features

Certified Cyber Insurance Endorsements•••

First Party Expense - Insuring
Agreements

CoverBusiness Interruption (First Party)

Aggregate Limit

Digital Asset Destruction

Aggregate Limit

Controls Required for Activation

Reputational Income Loss

Aggregate Limit

Cyber Extortion

Aggregate Limit•

Incident Response Expenses

Aggregate Limit•

Cyber Insurance Coverage up to AU$5M
Full Coverage LimitsFirst and Third-Party Expense

Sophos MDR Active Subscription (for discounted rateplans and MDR-related installations)
Cysurance Certification Conditionso MFA on all email accounts
o Back-ups (scanned for viruses)
o PHI/PII encryption (if regulatory conditions apply)o Data privacy compliance (if regulatory conditions apply)o Patch updates within 60 days of releaseo All events verified through log data

Certified Cyber Insurance
includes:❖Full Limits❖First and Third-PartyExpense

Third Party Expense - Insuring
Agreements

Cover

Security and Privacy Liability

Aggregate Limit

Regulatory Defense and Penalties

Aggregate Limit

Multimedia LiabilityAggregate Limit

Payment Card Industry Fines and Expenses

Aggregate Limit

NOTE: Insurance offered by Cysurance, LLC. DE License 3000712359, and in Australia, through Howden Broking Group, LTD Insurance Brokers. Canopius is a marketingname used to refer to subsidiaries providing insurance and related services. Insurance provided by Canopius Asia Pte Ltd. All products may not be available in all regions.
This communication contains product summaries only. Coverage is subject to the language of the policies as actually issued. Nothing herein should be construed as
involving the sale, solicitation or negotiation of insurance or the provision or offer of insurance services.
EXCEPT AS OTHERWISE PROVIDED, THE POLICY ABOVE PROVIDES COVERAGE ONLY FOR THESE CLAIMS THAT ARE FIRST MADE DURING THE POLICY PERIOD AND REPORTEDTO UNDERWRITERS DURING THE POLICY PERIOD OR AS OTHERWISE PROVIDED IN THE POLICY. DEFENSE COSTS ARE PART OF, AND NOT IN ADDITION TO, THE STATED LIMITOF LIABILITY.

❖Business Continuity &Disaster Recovery Plans

Automatic Qualification with Sophos MDROrganizations using the Sophos MDR service that have Cysurance’s requisite security controls in place automatically qualify for
the Cysurance Certification and Certified Cyber Insurance programs, providing two layers of protection against incident
remediation and recovery expenses.

Program Benefits
Cysurance Certified Insurance program: Provides up to AU$5 million in cyber insurance coverage, including full limits, first andthird-party expenses, business continuity and disaster recovery plans.
Cysurance Certification program: Reimburses up to AU$200,000 in remediation and recovery expenses in the event of aransomware incident, inclusive of breach notification costs, compliance and regulatory penalties, and business income loss.

Certification
Program❖ Ransomware❖ Compliance❖ Business Income Loss

Program Activation
In the event of a ransomware incident, the Certification program is activated first. Once exhausted, the Certified Cyber
Insurance responds to cover additional remediation expenses.
In the event of non-ransomware and business continuity events, the Certified Cyber Insurance responds immediately.

NOTE: Insurance offered by Cysurance, LLC. DE License 3000712359, and in Australia, through Howden Broking Group, LTD Insurance Brokers. Canopius is amarketing name used to refer to subsidiaries providing insurance and related services. Insurance provided by Canopius Asia Pte Ltd. All products may not beavailable in all regions. This communication contains product summaries only. Coverage is subject to the language of the policies as actually issued. Nothingherein should be construed as involving the sale, solicitation or negotiation of insurance or the provision or offer of insurance services.
EXCEPT AS OTHERWISE PROVIDED, THE POLICY ABOVE PROVIDES COVERAGE ONLY FOR THESE CLAIMS THAT ARE FIRST MADE DURING THE POLICY PERIODAND REPORTED TO UNDERWRITERS DURING THE POLICY PERIOD OR AS OTHERWISE PROVIDED IN THE POLICY. DEFENSE COSTS ARE PART OF, AND NOT IN
ADDITION TO, THE STATED LIMIT OF LIABILITY.

Certification Cyber
Insurance❖ Full Coverage❖ First and Third-PartyExpenses

Requisite Security Controls

The certification warranty is valid
when the following cyber controls
and conditions are actively in place:
Clients deploy industry standard and up-to-dateanti-virus or comparable prevention tools ontheir endpoints.
In the event of a claim for reimbursement, theaffected endpoint(s) log data will be required tovalidate the claim.
PHI encryption (for those in regulated industries)
and/or data backups are in place.
A cyber breach can often be resolved quickly
through backup restoration. A backup solution thatencrypts data at rest and is regularly scanned forviruses and malicious data is required. Cloud
backup solutions are also acceptable if they meetthese criteria.
Multi-factor authentication must be active on
all customer email accounts.

MFA is important, as it makes the stealing ofinformation harder for the average criminal.

www.cysurance.com/sophos-au

MFA prevents bad actors from gaining access to a
network via a stolen password and, in doing so,
allows other security tools to function asdesigned.
Clients must perform commercially reasonable
maintenance, including applying patches andupdates within 60 days of release.
As best practice, customers must follow a patchingcadence with commercially reasonable measurestaken close to the latest patch cycle release.
Clients must offer security awareness training totheir employees.
All employees should receive securityawareness training to ensure they have thenecessary skills to identify an attack.
Clients must ensure that out-of-cycle
wire transfers and invoicerouting information changes are verified anddocumented with the requestor.
Business controls that document any change
request to invoice routing and wire transfers are
required and documentation is provided in
the event of an attack.

The customer applies best efforts towards data
privacy and is compliant with any required
regulatory conditions.
If applicable, customer must adhere to any
national, state, federal, and/or regulatory,
privacy and security policies related to which they
are subject.
Clients regulated by healthcare, financial or othergovernmental authorities must demonstrate:• An annual risk assessment is completed anddocumented.
• Personal identifiable and health information
was inventoried and accounted for prior to theincident.
• All employees completed
appropriate regulatory-related training prior toincident, within the previous 12 months.
All events must be verified through log data
The warranty will not respond to a systemic failureof service provider infrastructure and/or an
application, or software that results in a loss.

Certified Cyber
Insurance Endorsements
First Party Expense for:• Business Interruption (FirstParty)• Digital Asset Destruction• Reputational Income Loss• Cyber Extortion• Incident ResponseExpenses
Third Party Expense for:• Security and Privacy
Liability• Regulatory Defence andPenalties• Multimedia Liability• PCI Fines and ExpensesCysurance: Addressing the Business Risk Management DilemmaBusiness spending on security, risk management
and resilience is rising exponentially to address aworsening threat landscape. Breaches, however,continue unabated, prompting cyber insurancecompanies to raise rates and reduce coverage.

Chief Information Security Officers (CISOs),
Chief Information Officers (CIOs) and seniorrisk management executives are rapidly concluding thatthe key to addressing cybersecurity threats is tountangle the complex and fragmented protection andmitigation strategies in place at most largeorganizations.
The dramatic rise in solutions deployed to protect
large enterprises has largely occurred in an
uncoordinated manner, making it challenging to monitor
complex enterprise infrastructures, users and missioncritical assets.

www.cysurance.com/sophos-au

Cysurance is a next-generation risk mitigation company
that certifies, warrants and insures security solutions
deployed by enterprise end-users.
Attacks Rising...But Covered Incidents Globallyare Declining -- Chubb• Certified solutions providers meet the most stringent
requirements demanded by underwriters of risks
associated with hardware, software, infrastructure andsecurity services deployed by enterprises across allindustries and geographies.
• Certified offerings minimize vulnerabilities faced bypublic, private and non-profit leaders.

"Insurance carriers are reducing or eliminating
coverage for ransom attacks and systemic
outages resulting from zero-day incidents."• As a program underwriter, the warranties attached toCysurance-certified solutions can be applied to cyberinsurance deductibles and other out-of-pocket expenses
in the wake of an incident or breach.
Our mission is to work with market-leading players in IT,
cyber risk management and the insurance community toenhance business resilience by protecting revenue andsupporting rapid recovery in the event of an incident.

The Root Cause: Lack of Coordination and Integration

The absence of coordination among IT
service providers, cybersecurity
solution developers, and insurance
underwriters makes companies lesssecure.

• IT Service Providers focus on
maintaining and improving systems
but are often not fully aware of new
cyber threats and weaknesses.

• Cybersecurity Solution Developers
create tools to fight specific threats
These three groups, essential to abut may not completely understandcompany's defence against cyber
the unique situations of different
threats, often work separately withoutbusinesses.
enough communication and teamwork,
leading to several issues.
• Insurance Underwriters evaluate risk
to set policy terms and prices but
usually lack up-to-date knowledge ofa company's actual security status.

www.cysurance.com/sophos-au

As a result, when cyber incident occur,
the lack of a unified strategy delays
response times because IT service
providers, cybersecurity teams, andinsurers lack the planning andprocedures to coordinate efforts.
This leads to prolonged exposure andmore damage to all involved.

"Lack ofcoordination resultsin delayed response
times, prolonged
damage and elevatedfinancialconsequences duringand after cyberincidents."

Our Mission:Limiting financial impact when acyber-attack strikes.

Frequency

Severitywww.cysurance.com/sophos-au

ImpactOur mission is to provide market leading
financial protection solutions – including
warranties and insurance.
We offer low-friction warranty andinsurance programs aligned to cybercontrol deployments that present
a complete set of features to enhance
the business resilience of Clientsby protecting revenue and supporting
rapid recovery in the event of an incident.

Cysurance-certified solutions reduce total
cost of ownership for small and mediumsized organizations through best-in-classsecurity solutions and managed services
that are specifically tailored to support thetechnology modernization and business
transformation objectives of leaders acrossvertical industries.

FOR MORE INFORMATIONSOPHOS@CYSURANCE.COM
www.cysurance.com/sophos-au

Follow us :linkedIn.com/company/cysurance
facebook.com/cysurance
twitter.com/cysurance
cysurance.com

Copyright © Cysurance, LLC. All Rights Reserved.