CrowdStrike event could push more cyber risk into captives

• Uncertainly over where losses will fall with expected disputes over wordings
• CrowdStrike making captives reassess cyber BI risk for non-malicious events
• Captives required to comply with DORA and NIS2 regulation

Although having a limited direct impact on captives, the recent CrowdStrike incident will likely lead to more companies assessing the possibility of utilising their captives to write cyber risk.

On Friday 19 July, as part of regular operations, CrowdStrike released a defective “rapid response content” update to its endpoint detection and response (EDR) tool “Falcon” on Microsoft Windows devices.