What it covers
Defence costs and damages for claims alleging that your security failure caused a third party's loss, such as transmitting malware, enabling a fraud or failing to prevent unauthorised access.
Cyber liability for when an incident reaches others.
If a cyber event in your environment causes loss to clients, suppliers or partners, they may hold you responsible. Cyber liability cover pays for your defence and for damages you're legally liable to pay.
How this cover works
When it responds
When a claim is first made against you during the policy period for a covered cyber event, subject to the retroactive date and policy wording. [TODO: confirm claims-made basis and retro date approach]
What we look at
How your systems connect to clients and partners: shared access, integrations, file exchange and email. Contractual security commitments you've made also matter.
Typical scenarios
Malware passed to a client
A compromised mailbox sends infected invoices to your clients. One of them suffers an outage and claims its losses from you.
Partner access abused
An attacker uses a stolen credential for your client portal to reach a partner's data. The partner alleges your controls fell short.
Contractual security breach
A client contract requires specific security controls. After an incident, the client claims you didn't meet them.
Controls that matter here
These are the controls that most influence our terms for this section of cover. Missing one doesn't automatically mean no cover. It means we'll talk about it, and explain the effect on your terms.
- MFA on all remote and email access, including service and shared accounts
- Segregation between client-facing systems and internal networks
- Secure file transfer and email authentication (SPF, DKIM, DMARC at enforcement)
- Documented security obligations in client and supplier contracts
Common questions.
No. Professional indemnity covers errors in the professional services you provide. Cyber liability covers claims arising from a cyber or security event. Many businesses need both. [TODO: confirm how the wording interacts with PI policies].
See how your controls shape your terms.
Start a Cyber Risk Check for a clear view of your exposure and what this cover could look like for you.
Get a Cyber Risk Check
Cover is subject to underwriting acceptance and to the terms, conditions, limits, sub-limits, deductibles and exclusions in the policy wording. [TODO: link to policy wording / product summary]