Complimentary cyber services: what do they mean for risk teams?

TL;DR: Cyber insurance is increasingly competing on operational risk reduction, not just post-loss financial transfer, according to Cowbell, whose included cybersecurity services, advisory support, scanning, training and incident-response guidance are built into every policyholder package to reduce exposure and claims frequency. The broader implication is that cyber insurance is increasingly competing on operational risk reduction, not just post-loss financial transfer.

Editorial analysis by NHI Mgmt Group, based on content published by Cowbell: “Unlocking Value: A Deep Dive into Complimentary Cybersecurity Services”.

Key questions

Q: How should organisations handle exposed credentials found through external scanning?

A: They should treat them as active identity exposures, not just security findings.

Q: Why do phishing and business email compromise continue to succeed even when organisations invest in awareness training?

A: Phishing succeeds because attackers exploit timing, trust, and human judgment, not just technical gaps.

Q: What are the signs that a cyber risk programme is improving after adding advisory services?

A: Look for fewer unresolved exposures, shorter time to remediate external findings, faster reporting of suspicious emails and more consistent incident escalation.

Practitioner guidance

• Link dark web findings to asset ownership Build a workflow that maps exposed credentials, leaked PII and open services to a named business owner and a remediation queue.
• Use awareness training for phishing and BEC scenarios Focus training on the specific social engineering patterns that drive account compromise, especially malicious links, credential prompts and urgent payment fraud.
• Test incident response before the first breach Maintain a current incident-response plan that includes call trees, decision rights and containment steps for account takeover, email compromise and leaked secrets.

Bottom line: The article frames cyber insurance as a delivery mechanism for active risk reduction, not just a financial safety net.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →