11 Tips for Securing Responsive Cyber Coverage

As the frequency of cyber threats continues to increase, so does the need for cyber risk management. With constant diligence and cooperation within institutions, losses incurred through data breaches and cyber events can be minimized.

Joshua Gold, Esq., chair of Anderson Kill Cyber Insurance Recovery Practice, shared that cyber risk management is a process and not an absolute solution. The following is a brief summary of strategies for navigating the fine print in cyber insurance plans:

1. Involve various departments in the insurance application process—particularly IT—to ensure an accurate representation of the institution’s cyber exposure.
2. Set retroactive dates as far in the past as possible. Hackers could have infiltrated your system months before they are detected.
3. Look for a clear policy structure; work alongside an insurance broker.
4. Ensure there are no gaps in the coverage and that there’s symmetry with other insurance plans at your institution.
5. Negotiate endorsements for special coverage needs pertaining to cloud providers and third-party vendors, and other data outside of the network or premises.
6. Get coverage built in for PCI issues and card brand fines and penalties.
7. Look out for sub-limits; they could sometimes be negotiated. Make sure they are robust enough and include voluntary parting of funds, social engineering, and cyber extortion.
8. Beware of exclusions for breach of contract, unencrypted mobile devices, and conduct.
9. Beware of conditions on reasonable cybersecurity measures in light of ever-changing nature of cyber threats.
10. Negotiate coverage for business interruption, property damage, and reputation damage.
11. Beware of war risk exclusions.