Cyber Insurance

What it covers

• Incident response, forensics and legal support
• Business interruption following a covered cyber event
• Data breach notification and regulatory defence costs
• Cyber extortion and third-party liability where included

Commonly excluded

• Failure to maintain the security controls warranted at placement
• Pre-existing or known incidents
• Infrastructure failure outside the insured's control unless included
• War and state-sponsored attack exclusions as worded

Eligibility

• Baseline controls such as multi-factor authentication, backups and patching
• Incident response arrangements in place
• Acceptable data volumes and prior incident history

How a claim works

1. 01Call the insurer's incident hotline before engaging your own vendors
2. 02Preserve logs and evidence; avoid actions that destroy forensic data
3. 03Use insurer-approved forensic and legal providers
4. 04Document downtime and financial impact from the outset