{"id":1682,"date":"2022-03-02T09:41:31","date_gmt":"2022-03-02T15:41:31","guid":{"rendered":"https:\/\/www.bbrown.com\/?post_type=insight&p=1682"},"modified":"2022-04-11T10:19:42","modified_gmt":"2022-04-11T15:19:42","slug":"russia-ukraine-cyber-risk-update","status":"publish","type":"insight","link":"https:\/\/www.bbrown.com\/us\/insight\/russia-ukraine-cyber-risk-update\/","title":{"rendered":"Russia and Ukraine \u2013 Cyber Risk Update"},"content":{"rendered":"

[vc_row row_style=”page-hero” full_width=”stretch_row_content”][vc_column]\n\t

\n\n\t\t
\n\t\t\t
<\/div>\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t<\/div>\n\n\t\t
\n\t\t\t
\n\t\t\t\t
\n\n\t\t\t\t\t\n
\n

White Paper<\/p>\n

\n Russia and Ukraine \u2013 Cyber Risk Update\n <\/h1>\n\t\n <\/div>\t\t\t\t\t\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\n\t<\/div>\n\n\t\n[\/vc_column][\/vc_row][vc_row][vc_column width=”2\/3″]\n
\n \n

\n Russia and Ukraine \u2013 Cyber Risk Update\n <\/h1>\n\t\n <\/div>[vc_column_text]The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently\u202fwarned<\/a>\u202fof Russian cyberattacks spilling over onto U.S. networks. The advice follows previous CISA warnings on\u202fthe risks posed by Russian cyberattacks for U.S. critical infrastructure<\/a>. As the conflict in Ukraine continues to escalate, so too are cyber threats.<\/p>\n

The current situation is a reminder of Not Petya in 2017 and the SolarWinds compromise in 2020; both being examples of attacks that were said to have been sourced within Russia that became widespread, impacting a wide range of organizations that did not have a relationship with the originally targeted entities or connected with the conflict between Russia and Ukraine.<\/p>\n

U.S. companies and their IT Security teams should anticipate Russian cyberattacks and assess the potential effects on their operations. Companies with operations or suppliers in the region could be impacted, but even companies that have no presence in Ukraine or Russia should watch for indirect impacts, such as Not Petya, and has implications on their suppliers, customers and partners.\u00a0Like Merck, indirect cyber collateral can be just as devastating as a direct cyberattack.<\/p>\n

In addition to the Russia\/Ukraine conflict and historical cyber loss experience ensuing from such conflicts, the publication of a court decision allowing $1.4 billion of coverage under an all-risks property policy, which incorporated a War Exclusion, has brought insurability into focus.\u00a0Lloyds of London has recently released four model War Exclusions with updated language focusing on and providing alternative ways of viewing cyberwar.\u00a0In addition, they have refined model wording to provide markets with a greater ability to consider ways to deal with some or all of the following:<\/p>\n