Are there insurance discounts for law firms with strong cybersecurity practices?

Cyber insurance carriers have become increasingly sophisticated in evaluating an applicant's security posture, and firms with robust cybersecurity programs benefit from materially lower premiums. The most impactful controls that drive discounts include multi-factor authentication on all remote access and email systems, endpoint detection and response tools across all devices, regular security awareness training for all employees, encrypted and air-gapped backup systems, and a documented and tested incident response plan.

Some carriers use a tiered discount structure. A firm meeting baseline security requirements receives standard pricing, while a firm exceeding those requirements with advanced controls qualifies for a preferred tier with discounts of 10 to 25 percent. Advanced controls that earn the largest discounts include 24/7 security monitoring through a managed security operations center, privileged access management limiting administrative credentials, network segmentation isolating sensitive data, regular penetration testing by third parties, and email authentication protocols such as DMARC, DKIM, and SPF.

Beyond premium discounts, strong cybersecurity practices reduce the likelihood and severity of claims, which keeps your loss history clean and positions you for favorable renewals over time. Carriers view firms with weak security as unacceptable risks and may decline coverage entirely, impose sublimits on ransomware coverage, or require coinsurance provisions that shift a percentage of losses to the firm.

To maximize your cybersecurity discount, complete the carrier's application thoroughly and accurately, document your security controls, and provide evidence such as penetration testing reports, training completion records, and your written information security policy. Working with a broker who understands cyber underwriting can help you present your firm's security program in the most favorable light and identify which carriers offer the best credits for your specific security investments.