SMB Cyber Insurance: Why Only 4% Buy — Myths, Budgets & Better Options (with Eric Cernak)

Season 3 /
/Episode 1

SMB Cyber Insurance: Why Only 4% Buy — Myths, Budgets & Better Options (with Eric Cernak)

Why do only ~4% of small and midsize businesses carry a standalone cyber policy? Host Jeff Edwards digs in with returning guest Erik Cernak (Hanover Insurance Group) to separate myth from reality and lay out practical next steps for SMBs, brokers, and MSPs.

In this episode:

  • “We’re too small to be a target” — how modern threat actors actually operate
  • Bolt-ons vs. standalone: where coverage (and limits) really differ
  • Budget tradeoffs in a hard insurance market
  • Why early incident reporting helps outcomes (and renewals)
  • Warranties, MSPs, and where to get trustworthy guidance
  • One thing you can do today: start asking better questions

Who should listen: SMB owners, CISOs at resource-constrained orgs, MSPs, brokers/agents, and anyone shaping cyber risk decisions.

Resources: Free guides & checklists at SafeHouseInitiative.org (no logins, tracking, or fees)

Hosts & Guest: Jeff Edwards • with Erik Cernak

#️⃣ Hashtags:

#CyberInsurance #SMB #SmallBusinessSecurity #BusinessContinuity #Ransomware #RiskManagement #InsuranceBrokers #MSP #SupplyChainRisk #GenerativeAI #DataBreach #SafeHousePodcast

 

Cybersecurity and AI for Small Businesses: Expert Insights with Chuck Brooks

Cyber & AI authority Chuck Brooks joins Jeff Edwards to give SMBs a no-nonsense playbook. Learn how agentic AI turbocharges phishing, why unmanaged IoT/OT opens doors, and the exact first steps—MFA, segmentation, backups, IR plan—that raise your resilience fast. We also cover using NIST and CMMC as practical roadmaps and when to rely on an MSP.

Read More »

When Business Stops: Coverage Litigation and the Fight for Recovery with Ted Brown

Ted Brown provides an expert legal perspective on cyber claims, discussing how they are far more complex than traditional insurance claims due to a multitude of moving pieces. He highlights common coverage disputes, such as late reporting and application issues, and stresses that cyber insurance is meant to bring a business back to where it was, not to “make them better.” Ted advises that the single most important step for any business is to work with their insurer and legal counsel as soon as an incident occurs, as this can prevent massive headaches and ensure a smooth recovery.

Read More »