Foire aux questions

It's an approach to IT security that trusts nothing and nobody by default, whether inside or outside the corporate network.

Zero Trust Policy is a security model based on the premise that nothing and no one should automatically be considered trustworthy, whether inside or outside the corporate network. Its main aspects are as follows:

1. Constant verification : Every access, user, or device is checked every time, even if already authorized.
2. Least privilege : Users have access only to those resources strictly necessary for their work.
3. Micro-segmentation : The network is divided into small zones to limit movement in the event of a breach.
4. Multi-factor authentication : Use of several methods to confirm user identity.
5. Continuous monitoring : Real-time analysis of all network behaviour.
6. Generalized encryption : All data is encrypted, whether in motion or at rest.
7. Context-based access policy : Authorizations depend on location, device used, or time of day.

This comprehensive approach helps prevent security breaches by not relying on default elements, thus strengthening the company's overall protection against internal and external cyber threats. The Zero Trust policy's comprehensive nature should instill a sense of security in the audience.

Professional liability insurance generally covers errors and omissions in providing professional services, whereas cyber insurance focuses specifically on data and computer systems risks. Cyber insurance offers specialized coverages such as crisis management in the event of a data breach, which are not included in standard professional liability policies.

Yes, most cyber insurance policies cover incidents caused by employee error, such as clicking on a phishing link or losing an electronic device containing sensitive data. However, employees' intentional malicious acts are generally excluded.

You can reduce your premiums by implementing robust security measures, such as up-to-date firewalls, intrusion detection systems, regular employee cybersecurity training, strong password policies, and regular backups. These measures demonstrate to the insurer that you take cybersecurity seriously.

No, company size is not a determining factor. Small and medium-sized businesses are often prime targets for cybercriminals, as they generally need more resources dedicated to cybersecurity. A cyber attack can devastate a small business, so adequate protection is essential.

Cyber insurance typically covers costs related to data breaches, business interruptions caused by cyber attacks, ransomware extortion, customer notification costs, legal fees and reputational damage. It can also include coverage for financial losses due to cybercrime.

The long-term impact is particularly worrying. Around 60% of Canadian SMEs that suffer a major cyber attack cease trading within six months of the incident. The main reasons are the astronomical costs associated with the attack and the loss of customer confidence.

It's important to review your coverage regularly with your broker. If the value of your assets increases significantly (e.g., through the purchase of new equipment or an increase in inventory), contact your broker to adjust your policy and avoid underinsurance.

The cost of your premium depends on many factors, including the value and type of property insured, the location of your business, the security measures in place, your claims history, and the coverage options you choose.

Standard home insurance generally does not cover commercial activities. It's important to talk to your broker about obtaining adequate coverage, whether through an extension to your home insurance or a separate commercial property policy.

Most standard policies do not automatically include flood or earthquake coverage. However, depending on your risk assessment and the insurer's acceptance, these coverages can often be added as an option.

Commercial property insurance generally covers buildings, equipment, furniture, inventory, and sometimes even third-party property in your custody. The exact coverage depends on your specific policy.