Mary Kummer Jim McNall PRIMA Spring Training 2018 Cyber risk! Mary Kummer Jim McNall PRIMA Spring Training 2018

Learning Objectives: Learn about cyber risks and what to do when you get invaded by malware. Know you have cyber coverage in your ICRMP insurance. Receive tips for staying safe online.

Two most common and most effective cyber attacks: The 1st is Ransomware. Ransomware enters the system though many ways. Email links/attachments, someone clicks a link, before you know it, no files can be opened or accessed. The ransomware encrypts the files and holds them “ransom” until you pay the requested amount of money.   Watch this 30-second video on ransomware.

The 2nd common cyber attack: phishing The 2nd common cyber attack: phishing. There are different types of phishing scams, but they always involve links or attachments in an email. They can even be made to look like they are coming from a real person in your agency.   Phishing scams are also becoming more targeted. Hackers will learn about your agency and then send emails that are better at tricking people into clicking links or attachments.

Covers data breach response and costs. Assist with the cost of reconstruction. Covers the cost of notifying individuals of potential hacks.

What can Idaho local governments do? TRAIN EMPLOYEES Train. If it looks suspicious or you have any doubt at all that it might not be real….verify with the person who sent it via phone or in-person.

Avoid Being A Victim! Backup data…Off-site & often Hire professional IT staff/firm Verify email requests before sending information Be extra cautious of links & attachments Don’t click on advertisements You will be targeted. At some point, if you haven’t already, you’ll be the target of a scam.   Here are some simple steps to take to avoid or lessen your chances of being a victim, or to minimize losses and frustration when you do get attacked. ICRMP has a malicious attempt to enter our systems or look for weaknesses on a daily basis. So you probably do, too. Backup your data, hire professional IT staff or outside vendor – that goes without saying. If you don’t already do those things, start today. Backing up your data will give you a better chance at not having to pay the ransom, because you can restore your data from the backup. BUT YOU ARE STILL RESPONSIBLE IF THEIR DATA THEY STORE FO YOU IS HACKED, SO REVIEW YOUR CONTRACTS CAREFULLY Verify email requests before sending any information. All it takes is a quick phone call. The “from” line of an email is easy to forge, so hackers are now making it look like the email is from someone at the agency, even though it’s not. Don’t open any attachment or click on any link in an email unless you know the email is legitimate. If there’s any question in your mind, even one shred of doubt, call to verify with the sender of the email before you click anything.

I got attacked….now what? Call your IT IMMEDIATELY Call ICRMP Next Don’t delete anything! Work with ICRMP & experts to resolve   Don’t hesitate, don’t wait – call ICRMP (or whoever your cyber liability insurer is) immediately. Don’t delete anything – this is often our first instinct. However, deleting files that you think are infected can prove to be problematic. As soon as you call ICRMP, we get our experts involved. That includes our reinsurer, forensic experts and others. To properly identify how the attack happened and what exactly was affected, they need to see everything. So even though it’s your first instinct, don’t delete anything. Once you call ICRMP, you’ll quickly be put in contact with our re-insurer and all the experts they use to remedy these issues. They deal with these attacks on a daily basis and will quickly help you get back up and running.

The best protection is YOU!

CYBER RISK #7 CLAIMS Area CRIME Things you can do… Theft and embezzlement… Things you can do…