The July 2024 CrowdStrike outage has sent shock waves through the cybersecurity world. According to a recent Parametrics report, it caused up to $5.4 billion in direct financial losses for Fortune 500 companies (excluding Microsoft). In contrast, CNN reports that CrowdStrike has only provided $60 million in service credits to customers. Companies now face potential long-term consequences, including increased insurance premiums. Ironically, these same policies may shield CrowdStrike from significant financial responsibility for damages.”
Rising Premiums: The Indirect Cost of the Outage
Insurance companies are in the business of risk assessment, and the CrowdStrike outage has highlighted a new level of risk in the cybersecurity landscape. When a major player like CrowdStrike experiences such a significant failure, it raises questions about the reliability of even the most trusted security solutions.
As a result, insurers are likely to reassess their risk models, potentially leading to:
- Higher premiums across the board for cyber insurance policies
- More stringent requirements for companies to qualify for coverage
- Increased scrutiny of companies’ reliance on single-vendor solutions
This shift in the insurance market means that companies, regardless of whether they were directly affected by the CrowdStrike outage, may face higher costs to protect themselves against future cyber incidents.
CrowdStrike’s Limited Liability: A Frustrating Reality
While companies face increased insurance costs, CrowdStrike may largely avoid financial responsibility for the outage. Their fast response, within contracted SLAs, shields them from liability despite the significant damages caused. Moreover, according to CIO, many standard cyber insurance policies don’t cover non-malicious acts like this system outage–leaving affected companies to bear the financial burden.
The Path Forward: Diversification and Resilience
To mitigate future risks and potentially offset insurance hikes, companies should consider:
- Implementing multi-vendor security strategies
- Developing robust incident response plans that account for vendor outages
- Investing in internal security capabilities to reduce reliance on external providers
While these measures may require upfront investment, they could prove cost-effective in the long run by demonstrating enhanced security capabilities to insurers and reducing vulnerability to single points of failure.
The CrowdStrike outage is a wake-up call for the industry. Cyber Shield Alliance can help clients prevent and reduce downtime with our focus on continuous testing and best-in-class IT support. Contact our experts today to safeguard your operations–and protect your business.