Cyberwar: Is the Sky Falling or Are We Just Paranoid?

Sometimes the line between legitimate worry and pathological fear can be very thin. Certainly, in a business like insurance, we want to be sensitive to various threats and risks, but when do we say that we’re carrying that sensitivity too far? Most of us would be happy to be characterized as prudently cautious, but no one wants to be called paranoid.

In a recent Wall Street Journal piece, two U.S. senators—Jay Rockefeller (D-WV) and Olympia Snowe (R-Maine)—are saying that our country should prepare for a cyberwar. The article notes that the U.S. needs to prepare for cyber-attacks that could “disrupt or disable vital information networks,” and “cause catastrophic economic loss and social havoc.”

In light of the recent attacks on Google, as well as other such events linked to China, Russia and unaligned hacking syndicates, it certainly seems prudent to recognize such threats and take steps to mitigate them. Yet, I am also hearing some who characterize the threat as overblown, and who point to the fact that previous cyber-attacks have not had such catastrophic consequences. While they may sincerely feel this way, however, I wonder how much of their largesse finds its origins in the economic realm. In other words: “Let’s not tick off China because we can make billions on that market.”

The current “what, me worry?” crowd reminds me a lot of people who were saying the same sorts of things prior to Sept. 11, 2001. Sure, we had terrorists attempting to blow up the World Trade Center, attacks on American embassies overseas, and the sinister attack on the U.S.S. Cole, but these were not major catastrophes, they claimed. While the families of those killed might care to differ, it’s likely that many in this country felt the same way at that time.

Moving back to the cyber-realm, it certainly is reasonable to think that while we haven’t had a 911-like cyber-incident yet, there are those who are dedicated to making it happen. The source of the threat may or may not be the same, but surely we have seen enough in the way of attacks to believe that more are coming—and that the next one could be a blockbuster.

So we are left with a choice. We can bury our respective heads in the sand and pretend that nothing horrible could happen, or we can pull out all stops to prevent what could easily be catastrophic consequences to our businesses, our infrastructure and our people. Call me paranoid if you like, but if it’s up to me, I’m going to err on the side of caution and put safety and security before profits and dollar diplomacy.

After all, isn’t that what we’re all about in the insurance industry?

Ara C. Trembly (www.aratremblytechnology.com) is the founder of Ara Trembly, The Tech Consultant, and a longtime observer of technology in insurance and financial services.

Readers are encouraged to respond to Ara using the “Add Your Comments” box below. He can also be reached at ara@aratremblytechnology.com.

This blog was exclusively written for Insurance Networking News. It may not be reposted or reused without permission from Insurance Networking News.

The opinions of bloggers on www.insurancenetworking.com do not necessarily reflect those of Insurance Networking News.

For reprint and licensing requests for this article, click here.
Security risk Policy adminstration Data and information management Data security Analytics
MORE FROM DIGITAL INSURANCE