Cyber Liability Insurance Guide

What this page helps you decide

This guide focuses on network security, privacy, incident response and cyber business interruption. Depending on the policy, it may address ransomware, privacy events, forensic response, notification, cyber interruption and some social-engineering exposures. The practical question is whether the quote matches the business’s real operations, contracts, property, vehicles, employees, or services.

Important caution: sublimits, consent requirements, security representations and crime/funds-transfer wording need separate review.

What to collect before comparing quotes

Use one consistent exposure file for every quote.

• Plain-English description of operations and any higher-risk or occasional work.
• Revenue, payroll, employees, subcontractors and class-code information where relevant.
• Locations, property, vehicles, tools, equipment and customer property.
• Leases, client contracts, lender requirements and COI wording.
• Prior claims/loss runs and current risk-control practices.

Policy details to compare

Read the declarations, forms list and endorsements rather than comparing premium alone.

• Named insured and covered operations.
• Limits, sublimits, aggregate structure, deductible or retention.
• Definitions and exclusions.
• Required endorsements and contract wording.
• Claim notice, audit, renewal and cancellation conditions.

When another policy line may matter

Business risks often cross policy boundaries. A strong comparison identifies what this policy does not address and which separate line should be reviewed.

• Employee injury vs third-party injury.
• Owned property vs damage to others’ property.
• Professional advice/services vs ordinary premises/operations.
• Owned autos vs hired/non-owned autos.
• Cyber/privacy/funds-transfer vs ordinary liability or crime.

Related reading