Wargame Findings
An analysis of 2,117 scored responses from 303 participants across 147 organisations showed that governance and communication decisions averaged 17 points higher than technical execution. Key weak points included containing attacks while maintaining essential services, operating on compromised systems, and restoring from verified clean backups, with only 11% of responses mentioning verified clean backup restoration.
Implications for Underwriting
Insurers reviewing cyber risks increasingly scrutinise backup practices and privileged access controls. Businesses that restore from unverified backups risk reinfection, potentially extending business interruptions and increasing claim sizes.