The Temecula Valley Chamber of Commerce recently hosted a timely and impactful educational workshop titled “Protecting Your Business: Why Cyber Liability Insurance and Proactive Cybersecurity are Critical in 2025.” Presented by Jesus Zarzosa, Founder & CEO of Triune InfoTech LLC, and Julie Ngo of State Farm Insurance, the session drew attendees from various industries, including insurance, manufacturing, payroll, nonprofit, security, and media production.

As the cyber threat landscape grows more complex and costly, small and mid-sized businesses (SMBs) are increasingly being targeted. This workshop offered crucial insights into how local businesses can better defend themselves, both technologically and financially, against rising digital risks.

Cyber Liability Insurance: What You Don’t Know Could Cost You

One of the session's key messages was simple: general liability insurance often does not cover cyber incidents. Business owners were urged to review their policies and confirm whether they have standalone cyber liability coverage or an added endorsement.

“If your business handles sensitive data—even just emails and payment info—you need to know what is and isn’t covered,” Zarzosa emphasized.

Key Points to Review:

• Coverage limits for direct losses and third-party lawsuits.
• Common exclusions (e.g., wire transfer fraud).
• Requirements around employee training and security protocols.

Case Study: Real-World Ransomware Incident

A ransomware attack on a local manufacturing company in Murrieta served as a wake-up call. A rogue laptop on the third shift allowed malware to spread rapidly through the network.

Thanks to pre-existing safeguards, only six machines were affected, and operations resumed within 8–9 hours, avoiding what could have been weeks of downtime.

Cybercrime in 2025: AI, Deepfakes, and Evolving Tactics

The speakers highlighted the rise of AI-driven cyberattacks, making it easier for even unskilled attackers to cause significant harm. Threats include:

• AI-crafted phishing emails
• Deepfake Zoom calls featuring fake executives
• Ransomware-as-a-service tools available on the dark web

Zarzosa also noted a shift in attacker focus from large enterprises to SMBs, which are often less protected but still hold valuable data. In fact, over 70% of ransomware attacks in recent years have targeted small and mid-sized organizations.

The High Cost of an Attack

Cyberattacks are not only disruptive—they’re expensive. In 2024, the average SMB breach cost exceeded $120,000, with additional legal and reputational damages compounding the impact.

One late-2024 case saw a local manufacturer lose $180,000 to a compromised CFO email account, plus $47,000 in legal, forensic, and monitoring costs. It took four months to recover.

Cybersecurity ≠ Traditional IT

Traditional IT focuses on hardware and software maintenance. Today’s cybersecurity must encompass:

• Attack surface reduction across office, cloud, mobile, and remote workspaces
• Employee training and phishing simulations
• Policy enforcement and process documentation

“You can’t outsource responsibility,” Zarzosa warned. “Even with cloud providers, your business is still accountable for data security.”

Insurance Compliance: The New Standard

With cyber insurance claims rising, insurers are tightening their standards. Businesses are now expected to have:

• Multi-Factor Authentication (MFA)
• Endpoint Detection & Response (EDR)
• Security logging and regular training

Claims may be denied if businesses lack documented policies, updated systems, or incident response procedures. Some insurers even conduct mid-policy audits to ensure compliance.

Simple but Effective Cyber Hygiene

Here are some actionable steps for every business:

1. Use business-only emails for company activities
2. Separate guest Wi-Fi from operational networks
3. Enforce MFA on all critical systems
4. Back up data to immutable, offsite locations
5. Regularly test data restoration processes
6. Conduct employee training and phishing simulations
7. Review and understand your cyber insurance coverage

Final Takeaways

• Cybersecurity is an ongoing process, not a one-time fix.
• Documentation and staff awareness are as critical as the technology itself.
• Cloud responsibility is shared—enable the tools you already have.
• Cyber liability insurance is a safety net, not a guarantee—compliance matters.

This workshop served as a powerful reminder that no business is too small to be a target, and taking action today can mean survival tomorrow.

About the Presenters

Jesus Zarzosa, Founder & CEO of Triune InfoTech LLC
Triune InfoTech specializes in a wide range of services, including tailored IT services and solutions for small and medium businesses in San Diego, Temecula, Murrieta, Corona, Ontario, and Riverside. We are committed to providing each and every one of our clients with high-quality service and support. Follow on LinkedIn to stay up to date.

Julie Ngo, Insurance Agent at State Farm Insurance
Julie Ngo has been proudly serving the Temecula Valley community as a State Farm Insurance Agent since 2006. With licenses in California, Arizona, and Oregon, she provides personalized coverage solutions in auto, home, life, and health insurance. Julie is deeply committed to helping individuals and businesses make informed insurance decisions that protect what matters most. A trusted local professional, she is also actively engaged in community events and nonprofit work. When she’s not in the office, Julie enjoys exploring Temecula’s food and wine scene and spending time with her son, Collin, and fiancé, Jerry.