Simply Defensive

← Simply Defensive17 nov 2025 · 33 min

Cyber Insurance Explained: What Blue Teams Need to Know Before an Incident

Cyber Insurance Explained: What Blue Teams Need to Know Before an Incident17 nov 202533 min

From teaching AP art history to brokering cyber insurance deals. 🎓➡️🛡️

In this episode of Simply Defensive, Josh Mason and Wade Wells sit down with Andy Runyan from Yukon to break down everything blue teamers need to know about cyber insurance — before an incident happens. Andy shares his unconventional journey from fourth-generation educator and baseball coach to becoming a cyber insurance specialist, and explains why understanding your policy is just as important as your incident response plan.

What you'll hear:

🔹 How cyber insurance actually works (and what it doesn't cover)

🔹 Why having an incident response retainer matters — before you need it

🔹 The role of cyber insurance in incident response and recovery

🔹 Third-party contract requirements and state mandates on the rise

🔹 Common mistakes companies make when filing claims

🔹 FTC Safeguard Rules and what they mean for businesses

🔹 How to prepare your organization for cyber insurance requirements

🔹 What lowers premiums (and what should, but doesn't)

Why This Matters for Blue Teamers: