Cyber Insurance Explained: What Blue Teams Need to Know Before an Incident

About this episode

This episode discusses the essentials of cyber insurance for blue teamers, featuring insights from expert Andy Runyan.

From teaching AP art history to brokering cyber insurance deals. 🎓➡️🛡️ In this episode of Simply Defensive , Josh Mason and Wade Wells sit down with Andy Runyan from Yukon to break down everything blue teamers need to know about cyber insurance — before an incident happens. Andy shares his unconventional journey from fourth-generation educator and baseball coach to becoming a cyber insurance specialist, and explains why understanding your policy is just as important as your incident response plan. What you'll hear: 🔹 How cyber insurance actually works (and what it doesn't cover) 🔹 Why having an incident response retainer matters — before you need it 🔹 The role of cyber insurance in incident response and recovery 🔹 Third-party contract requirements and state mandates on the rise 🔹 Common mistakes companies make when filing claims 🔹 FTC Safeguard Rules and what they mean for businesses 🔹 How to prepare your organization for cyber insurance requirements 🔹 What lowers premiums (and what should, but doesn't) Why This Matters for Blue Teamers: If you're in a SOC or handling incident response, you will interact with cyber insurance at some point. Understanding how policies…

People in this episode

Hosts: Josh Mason, Wade Wells

Guest: Andy Runyan

Topics covered

• cyber insurance
• incident response
• blue team
• policy understanding
• claims process
• financial recovery

Keywords

• cyber insurance
• incident response
• policy coverage
• claims mistakes
• premiums
• FTC Safeguard Rules

Mentioned in this episode

Organizations: Yukon, FTC

More episodes of Simply Defensive

• S6:E3 - Tom Dejong - Inside the BHIS SOC: Triage, Curiosity, and Career Growth · May 4, 2026 · 31 min
• S6E2: John Hammond on Security Research, Storytelling, Deception, and Getting Hired in Cybersecurity · March 17, 2026 · 39 min
• From Blue Team Challenges to AI Innovations: A Conversation with Jason Haddix · February 24, 2026 · 32 min
• From Pre-Law to FLARE: How Josh Stroschein Became Google's Malware Analyst · December 1, 2025 · 40 min
• Building Zero Trust Tools: Inside ThreatLocker with Product Manager Yuriy Tsibere · November 24, 2025 · 36 min
• Building Forensics Tools That Last | Brian Carrier (Autopsy, Sleuth Kit) · November 10, 2025 · 32 min