Cyber liability, quoted on the controls the business can actually show.

Ransomware that stops the business, and a payment redirected by a convincing e-mail — the two losses this line is bought for, and the two an underwriter asks about first.

Cennairus is a licensed wholesale insurance broker: retail agents send us the accounts their own markets cannot place, stay the agent of record, and we take each account to the markets on our panel of 145 carriers that write it. Cyber liability pays for the fallout of a network security or privacy event: ransomware and the income lost while operations stop, notifying the people whose data was exposed, and the defense if they or a regulator come back. Underwriters price it on controls such as multi-factor authentication and tested backups. Cennairus shops it across the panel.

37 marketsin our directory write this line

One formthe security answers, given once

Peoplea licensed broker reads the sub-limits

Yoursyou keep the client

What you get

Eligibility turns on the controls

Multi-factor authentication on e-mail and remote access, backups that are tested and kept offline, endpoint protection, and a phone call to verify any change of payment details. A weak answer there is what gets a submission declined or sub-limited, so we ask for it before it goes out.

Breach response is a service, not a reimbursement

Report the incident and the carrier’s panel goes to work: a breach coach, forensics, notification and legal counsel. It is the part of the policy agents undersell, and the part the client uses first.

The sub-limits are where the coverage lives

Ransom, social engineering and dependent business interruption are usually written under their own sub-limits, not at the policy limit. A licensed broker reads them across the quotes that come back, so the account is not sold on the headline limit.

Send what the account already has

A prior cyber application, a completed security questionnaire, or a plain description of the systems and the revenue is enough to start. The desk chases the gaps and handles the questions the underwriters send back.

How do I quote cyber liability through Cennairus?

The security answers, once

Revenue, what data the business holds, and how e-mail, remote access, backups and payment changes are protected. Every market asks for this in its own words; you give it once.

Measured against appetite

The submission goes to the markets that write this risk at that size and with those controls, and a licensed broker works the ones that answer, including the questions an underwriter sends back.

Terms back, sub-limits included

What comes back is laid out on the terms that decide a cyber claim: the ransomware and social engineering sub-limits, the waiting period on business interruption, and what the carrier wants in place first.

What does cyber liability not cover?

The product failing to perform A bug, a failed integration or a service that did not do what the contract promised is a Technology E&O claim, not a breach — one event can trigger both, which is why the two are so often written together.

Bodily injury or property damage A customer hurt on the premises is General Liability; physical damage to the building and its contents is Commercial Property. A cyber policy answers for the data, the systems and the income they carry.

Money taken by someone on the inside A dishonest employee is a Crime & Fidelity loss. The outsider who talks an employee into changing a vendor’s bank details is the cyber form’s funds transfer or social engineering sub-limit — settle which policy is meant to answer before the loss, not after.

A suit over how the board oversaw security When a breach turns into a claim against the directors and officers themselves, that piece belongs to Directors & Officers, not the cyber policy.

What does cyber liability insurance cover?

Cyber liability pays for the fallout of a network security or privacy event: the ransomware that stops operations and the income lost while they are stopped, the cost of telling the people whose data was exposed, and the defense and settlement if they or a regulator come back.

Most of it arrives as a service rather than a reimbursement. One call reports the incident and the carrier’s panel supplies the breach coach, the forensic investigators and the legal counsel — the client is not expected to find them mid-incident and claim the bill later.

The sub-limits are where the coverage really lives. Ransom, social engineering and dependent business interruption are commonly written well below the policy limit, so read those lines on the form being quoted rather than assuming the limit on the front page answers.

Contracts increasingly require it. A customer, a lender or a landlord asks for evidence of cyber cover, and that request is very often why the account calls in the first place.

Who buys it: any business storing customer payment or personal data; professional offices — medical, legal, financial, accounting; retail, restaurants and any point-of-sale operation; contractors and trades handling client and vendor payments; software, saas and managed service providers; non-profits and associations holding donor or member records.

Cyber, answered

What gets a cyber submission declined?

Almost always the controls. No multi-factor authentication on e-mail or remote access, backups that are untested or left online, no endpoint protection, or no phone call to verify a change of payment details. A weak answer there is what turns into a decline, a higher retention or a cut sub-limit — fixing one of them before the submission goes out is usually worth more than shopping it harder.

What is the difference between cyber and technology E&O?

Cyber answers for the breach: data exposed, systems locked, notification, response costs and the income lost while the business is down. Technology E&O answers for the product or the service failing to do what the client was promised. A software or managed service firm can suffer both from one event, which is why they are usually written together — see Technology E&O.

Does it cover the ransom itself?

Most forms address ransom negotiation and payment as part of the response, but under their own sub-limit and on the conditions that form sets — and an underwriter will look at the backups before agreeing to any of it. Read the ransomware sub-limit on the form being quoted rather than assuming the policy limit.

What is actually on a cyber application?

Revenue, industry, how customer and employee data is stored, and a short set of security questions: multi-factor authentication on e-mail and remote access, how backups are run and tested, endpoint protection, and how a change to payment details gets verified. A prior cyber application or a completed security questionnaire covers most of it.