Kuala Lumper, 16 October 2019 — A survey by Chubb of Small and Medium Enterprises (SMEs) in Malaysia has revealed a significant perception gap between the threat of cyber risks and how prepared SMEs are to deal with them.
The Chubb SME Cyber Preparedness Report 2019– ‘Ignorance is Risk’ – released today, reveals that 84% of the respondents in Malaysia were victims of cyber incidents in the past year. At the same time, 67% of SMEs incorrectly believe that large corporations are more at risk than SMEs.
“This is a worrying misconception,” according to Mr Andrew Taylor, Cyber Underwriting Manager, Chubb Asia Pacific. “Particularly with the recent implementation of the National Cyber Crisis Management Plan by Malaysia’s National Cyber Security Agency to combat cyber threats.
“Complacency leaves the door wide open for malicious attacks, future breaches and inadequate incident response,” says Mr Taylor. “In fact, smaller companies face a larger degree of exposure to cyber risk owing to their size and resources, as well as the lack of capital to invest in cyber risk management tools.”
Man vs Machine – Where’s the Greatest Risk?
With nearly half (48%) of cyber incidents resulting from human and administrative error, it is unsurprising that more than one third (37%) of SME leaders in Malaysia say their employees’ poor understanding of potential cyber threats is challenging their ability to protect their business. Critically, 20% of SMEs believe employees are the weakest link in their cyber defence.
While leaders recognise the importance of cyber training, 41% believe that employees are neglecting their responsibilities around data protection.
In the event of a major cyber incident, businesses indicated that customers (60%) followed by company profits and reputation (58%) would be most affected.
Among Malaysian SMEs, customer records are the most commonly breached data – with 40% of businesses facing a breach of customer files in the past 12 months, followed by R&D data, IP data and financial performance data, all at 31%.
The Best Laid Plans?
Three out of five (61%) of Malaysia’s SMEs say they have a data breach response plan. However, there is a clear difference in cyber preparedness among SMEs of different sizes. 77% of SMEs with 100-249 employees have a data breach contingency plan compared with 53% in smaller SMEs with fewer than 50 employees.
Malaysian SMEs were faster to respond to cyber incidents than other markets surveyed, with 67% resuming operations within 12 hours of a cyber incident. Two-thirds (66%) indicated that everyone involved knew the proper protocol and crisis response went ahead as planned.
How Insurance Can Help
The survey further found that 70% of SMEs believe the insurance industry has an important role to play in helping businesses protect themselves against cyber risk. However, 60% also believe the industry is not moving fast enough to keep up with the rapidly evolving nature of cyber risk.
“In Malaysia it is concerning to see a high number of small businesses falling victim to cyber incidents coupled with a general lack of understanding and preparedness around the risks,” said Steve Crouch, Country President, Chubb Malaysia.
“Worryingly it appears many Malaysian SMEs falsely believe that their general insurance policies cover cyber risk, when in fact it most likely does not. Given the large proportion of the economy that SMEs make up in the country, I believe this is a critical issue to address.”
Visit Chubb’s website for more details: www.chubb.com/my-sme-cyber-report-2019
About the Chubb SME Cyber Preparedness Survey - ‘Ignorance is Risk’
This year’s report, ‘Ignorance is Risk’, has been produced by Chubb. It is based on a survey of 1,400 respondents from Small and Medium Enterprises (SMEs) in four locations; 400 each from Malaysia and Australia, 300 each from Singapore and Hong Kong. Respondents comprised board-level executives (82%) and senior managers or directors below board level (18%) from SMEs between 2 to 249 employees. The industries respondents belonged to are: Manufacturing (20%), Professional Services (19%), Retail & Hospitality (13%), Technology (8%), Education (7%), Financial Services (5%), Healthcare (4%), Media & Communications (4%); and other industries (20%).
About Chubb in Malaysia
Chubb is the world's largest publicly traded property and casualty insurance company. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. As an underwriting company, we assess, assume and manage risk with insight and discipline. We service and pay our claims fairly and promptly. The company is also defined by its extensive product and service offerings, broad distribution capabilities, exceptional financial strength and local operations globally. Parent company Chubb Limited is listed on the New York Stock Exchange (NYSE: CB) and is a component of the S&P 500 index. Chubb maintains executive offices in Zurich, New York, London, Paris and other locations, and employs more than 30,000 people worldwide. Additional information can be found at: chubb.com.
Chubb’s operation in Malaysia (Chubb Insurance Malaysia Berhad) provides a comprehensive range of general insurance solutions for individuals, families and businesses, both large and small through a multitude of distribution channels. With a strong underwriting culture, the company offers responsive service and market leadership built on financial strength. Chubb in Malaysia has a network of 23 branches and more than 2,600 Independent Distribution Partners (agents).
More information can be found at www.chubb.com/my.
Media Contacts
April Lim
Chubb Insurance Malaysia Berhad
T: +603 2058 3315
Jackson Au
MHP Communications
T: +6 012 680 5068