DSMIG Blog

Risk Management for Iowa Businesses: Where to Start

dallas@mcdadeins.com (Dallas Downey. CLCS) — Tue, 21 Apr 2026 20:21:59 GMT

Most Iowa business owners didn't get into business to become risk management experts. You built your company, grew your team, figured out operations, and learned how to keep clients happy. Nobody sat you down and walked you through experience modification rates, OSHA compliance tiers, or what a premium audit can do to your cash flow.

Risk Management Made Simple for Iowa Businesses

dallas@mcdadeins.com (Dallas Downey. CLCS) — Tue, 21 Apr 2026 20:16:29 GMT

If you've landed here, you already know the mission: education, not gatekeeping. No fine print, no upsell disguised as advice — just straight talk about the risks that can seriously hurt your business if you're not paying attention.

Cyber Insurance for Businesses | Des Moines & Houston

dallas@mcdadeins.com (Dallas Downey. CLCS) — Mon, 16 Mar 2026 17:19:51 GMT

When Iranian-linked hackers wiped out over 200,000 systems at Stryker Corporation in a single night, it wasn't a movie plot — it was a real event that unfolded in March 2026 and sent shockwaves through the business world. Stryker, a $25 billion medical device company with 56,000 employees across 79 countries, went from full operations to a global standstill before most people had finished their morning coffee.

If it can happen to them, it can happen to any business.

What Actually Happened to Stryker

Around midnight on March 11, 2026, Stryker employees started watching their computer screens go dark — one system at a time. Workers scrambled to unplug machines trying to save what data they could. In some offices, as many as 95% of devices were wiped clean. By morning, the company had reported a "global network disruption" to its entire Microsoft environment.

The group behind the attack, Handala — a pro-Iranian digital activist group — claimed responsibility, saying it extracted 50 terabytes of data and wiped more than 200,000 systems, servers, and mobile devices. Whether those numbers are fully verified or not, the damage was undeniable: manufacturing stopped, shipping halted, and order processing ground to a halt.

Stryker's stock fell nearly 9% in the days following the attack, trading near its 52-week low. For a company with a $132 billion market valuation, that kind of drop represents billions of dollars in lost market value — almost overnight.

The company's official response acknowledged it could not yet determine when systems would be fully restored. The financial impact? Still being calculated.

This Is Not a Fortune 500 Problem — It's Every Business Owner's Problem

The Stryker attack gets headlines because of its scale. But the same tactics used against billion-dollar corporations are used against businesses your size every single day.

In fact, small and mid-sized businesses are frequently targetedbecausethey tend to have fewer cybersecurity resources. In 2025, 75% of small and mid-sized businesses reported they could not continue operating if hit with a ransomware attack. The average cost to recover from a cyberattack sits around $120,000 — and that's before you factor in legal costs, regulatory fines, or reputational damage.

What made the Stryker attack particularly damaging wasn't ransomware — it was a wiper attack. Instead of locking data and demanding payment, the attackers simply destroyed it. There was no ransom to negotiate, no key to purchase — just permanent data loss and a scramble to rebuild from scratch. That kind of attack can be even more destructive because there's no clear end point to the crisis.

Think about what that would mean for your business. Your customer data, your financial records, your operational systems — gone. No warning. No negotiation. Just disruption.

What Cyber Liability Insurance Actually Covers

Cyber liability insurance exists specifically to address these scenarios — and it covers far more than most business owners realize.

Here's what a solid cyber policy can do for you when something goes wrong:

Business interruption income — If a cyberattack forces you to shut down operations, a policy can replace the income lost during that downtime and cover the extra expenses of getting back up and running.
Data recovery and restoration — Whether your data is stolen, corrupted, or wiped entirely, cyber coverage can pay for the cost of recovering and rebuilding your digital assets.
Forensic investigations — After an attack, you need to understand what happened, how it happened, and what was accessed. Forensics teams don't come cheap, and cyber insurance covers that.
Legal fees and regulatory penalties — If customer data was exposed, you may face lawsuits and government fines. Cyber insurance covers your legal defense and regulatory costs.
Notification and crisis management — You're often legally required to notify customers about data breaches. Your policy can cover those notification costs, credit monitoring services, and even public relations support to manage reputational fallout.
Cyber extortion — If a hacker demands ransom to unlock your systems or return your data, some policies cover ransom negotiations and payments.

What many businesses don't consider is that a standard general liability or commercial property policy won't cover any of this. Cyber risk requires its own coverage — and waiting until after an attack to figure that out is too late.

The Stryker Wake-Up Call for Businesses

Whether you're running a manufacturing operation in the Des Moines metro or managing a professional services firm in the Greater Houston area, your exposure to cyber threats is real and growing. Every business that handles customer data, processes payments online, or relies on cloud-based software carries cyber risk.

Think about the businesses across Central Iowa — distributors, healthcare providers, financial services firms, construction companies — all running on connected systems. Or the Houston market, where energy, logistics, and professional services firms handle sensitive data daily. A cyberattack on any one of them would disrupt not just operations, but the clients and vendors they serve.

The Stryker situation shows that even a company with massive resources and IT infrastructure can be brought to its knees. For businesses paying over $100,000 annually in insurance premiums, the stakes of leaving cyber exposure unaddressed are especially high — the gap between covered and uncovered losses could be catastrophic.

What to Look for in a Cyber Insurance Policy

Not all cyber policies are built the same way. When evaluating coverage, there are a few things worth paying attention to:

The policy should cover bothfirst-partylosses (your own financial damage) andthird-partyliability (claims from clients or customers whose data was affected). You want coverage for business interruption that kicks in even when the attack originates from a third-party vendor — because your exposure doesn't stop at your own network.

You'll also want to ask aboutwiper attacksand destructive malware specifically. As the Stryker attack demonstrated, ransomware isn't the only threat — and some older policies may not explicitly address data destruction events where there's no ransom demand.

Finally, pay attention to sublimits. Some policies carry reduced coverage caps on specific types of claims like social engineering fraud or system failure. Understanding exactly what's covered — and what isn't — before a claim happens is the whole point of working with a risk advisor who knows this space.

Frequently Asked Questions

Does my general liability policy cover a cyberattack?
Almost certainly not. Standard commercial general liability policies typically exclude cyber-related losses. Cyber liability insurance is a separate, standalone coverage designed specifically for digital threats.

Do I need cyber insurance if I'm a small business?
Yes. Small businesses are frequently targeted because attackers assume weaker security defenses. With the average recovery cost sitting around $120,000, a single attack can permanently close a small business that isn't insured.

What if I already have an IT team or cybersecurity tools in place?
Technology controls reduce your risk, but they don't eliminate it. The Stryker attack hit a company with far more IT resources than most businesses will ever have. Insurance is what bridges the gap between prevention and recovery when prevention isn't enough.

What types of businesses benefit most from cyber coverage?
Any business that handles customer data, processes online transactions, relies on cloud-based software, or operates in regulated industries — healthcare, finance, legal — should carry cyber insurance. In practice, this describes most modern businesses.

Is cyber insurance expensive?
The cost varies based on your revenue, industry, and existing security controls. But compared to the average $120,000 recovery cost — or the potential multi-million dollar losses from business interruption — a well-structured policy is typically one of the most cost-efficient risk transfers available.

Talk to Risk Advisors of Iowa About Cyber Coverage

The Stryker attack is a reminder that no business is too sophisticated, too large, or too well-protected to face a catastrophic cyber event. For businesses in Iowa and the Greater Houston area that are serious about protecting what they've built, cyber liability insurance isn't a luxury — it's a foundational part of your risk management strategy.

If your business is paying over $100,000 a year in insurance premiums and cyber isn't part of the conversation, that's a gap worth fixing now. At RAI, we work directly with business owners to evaluate cyber exposure, identify coverage gaps, and place policies that actually respond when you need them to.

Reach out to us today to schedule a cyber risk consultation. One conversation could mean the difference between a recoverable incident and a business-ending one.

Des Moines Cyber Insurance Help - Risk Advisors of Iowa | DSMIG

dallas@mcdadeins.com (Dallas Downey. CLCS) — Thu, 20 Nov 2025 20:35:19 GMT

Small business owners often believe they're flying under the radar of cybercriminals, but the reality paints a different picture. More than half of cyber claims filed in 2024 originated from companies with under $150 million in annual revenue, according to research from Chubb's 2025 report "Navigating the Cyber Claims Landscape." Even more concerning, 28% of these claims impacted businesses with less than $25 million in revenue.

The assumption that smaller operations make less attractive targets is a dangerous misconception. In fact, these organizations face disproportionately higher risks. Cybercriminals specifically target smaller companies because they often lack dedicated IT departments and sophisticated security infrastructure. When you're managing payroll, client relationships, and daily operations without extensive technical staff, cybersecurity often takes a backseat—and attackers know it.

The numbers from Microsoft tell an equally troubling story. One in three small and middle market businesses has fallen victim to a cyberattack. These incidents aren't minor inconveniences—they carry an average price tag of more than $250,000, with some cases reaching $7 million. For a company operating on slim margins, that kind of financial hit can be devastating. Research shows that 60% of small businesses that experience a cyberattack close their doors within six months.

Auto Collision Repair Process: 8 Steps That Ensure Your Car Returns Better | Des Moines

dallas@mcdadeins.com (Dallas Downey. CLCS) — Wed, 24 Sep 2025 19:45:13 GMT

From the author: I work with a lot of local business owners and drivers, and collision damage and insurance claims can be stressful. A couple of months back, Farm Boy Collision Center had reached out to me to introduce themselves and offer to be an asset to those very clients I work with. Being a classic car lover (Farm Boy started out as a classic car restoration shop and still works on a few projects a year for their clients), I couldn't not have a conversation and see if there was a way I could help spread the word on them. Farm Boy is a shop many clients trust, so I wanted to break down their process at a level everyone can understand below.

What is a Return to Work Program? - Reduce your Iowa Work Comp Costs

dallas@mcdadeins.com (Dallas Downey. CLCS) — Mon, 25 Aug 2025 18:53:17 GMT

How Key Person Life Insurance Protects Des Moines Businesses

dallas@mcdadeins.com (Dallas Downey. CLCS) — Tue, 15 Apr 2025 16:28:46 GMT

As a Des Moines business owner, you've invested countless hours building your company. From the East Village to Valley Junction, local businesses form the foundation of our community's economic strength. Yet many business owners overlook an important aspect of risk management: protecting their organization against the loss of essential team members through key person life insurance.

2025 Safety Report for Iowa Businesses: Mitigating Risks with DSMIG

dallas@mcdadeins.com (Dallas Downey. CLCS) — Mon, 07 Apr 2025 18:29:01 GMT

As business owners, understanding and managing risks is one of the most important pieces for maintaining a safe and productive work environment. A recent safety report from Pie Insurance highlights several key areas of concern and strategies for mitigation. In this article, we will break down these insights and provide actionable advice for local businesses, incorporating data from the report to illustrate the importance of proactive safety measures.

What is Social Engineering Fraud? | Des Moines Insurance Guy

dallas@mcdadeins.com (Dallas Downey. CLCS) — Mon, 24 Mar 2025 12:30:00 GMT

What is Social Engineering Fraud?

As a Des Moines business insurance professional, I frequently discuss social engineering fraud protection with local companies. These attacks often begin with something as simple as an email that appears to come from a trusted source, making them particularly dangerous for businesses of all sizes.

What Is Business Interruption Insurance Coverage? | Des Moines

dallas@mcdadeins.com (Dallas Downey. CLCS) — Mon, 10 Mar 2025 12:30:00 GMT

What Is Business Interruption Insurance?

Running a business in Des Moines requires careful planning and protection. Business interruption insurance, also known as business income insurance, helps replace income when unexpected events force your company to close temporarily. For Des Moines business owners, this coverage typically comes as part of a Business Owner's Policy (BOP), bundled with commercial property and general liability insurance.