In the age of ransomware and phishing, many organizations are looking to cyberinsurance to mitigate their risk. But in Europe, the Middle East, and Africa — the EMEA region — such insurance is slow to catch on, according to Aon Risk Solutions' 2017 EMEA Cyber Risk Transfer Comparison Report.

The report looks at the results of a Ponemon Institute survey of over 500 cyber and enterprise risk managers in EMEA corporations conducted in late 2016. Over one-third of respondents disclosed they had a "material or significantly disruptive" breach or incident within the past 24 months, the average financial impact of which was $3.3 million. Around two-thirds, 65%, also said their risk of a cyberattack will likely increase over the next two years, while 22% predicted it will stay the same.

Related: Get ready: A cyber attack is coming

|

Less than 25% covered

But when it came to adopting cyber insurance as a remedy, only 23% of respondents reported having plans in place. Among those that didn't, 46% had no plans to purchase cyber insurance over the next two years, while 54% did.

Recommended For You

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.

Rhys Dipshan

CT-born, New York-based legal tech reporter covering everything from in-house technology disruption to privacy trends, blockchain, AI, cybersecurity, and ghosts-in-the-machine. Continually waiting for law to catch up with tech. (It's like waiting for Godot, but without the clowns)