WHAT COULD GO WRONG AND WHY YOU NEED
CYBER INSURANCE
What Cyber Insurance Covers
Cyber insurance typically covers the key costs and risks that come from a cyber incident. This includes:
Data breaches – costs to manage exposed or stolen customer or business dataIT recovery – restoring systems, recovering data, and fixing damage caused by hackersBusiness interruption – loss of income while your systems are downCyber extortion – ransomware payments and support to respond to threatsLegal costs – defending claims if a third party is affected by the breachNotification & support costs – informing impacted clients and providing credit monitoring if required
❋ Scenario 1 Phishing AttackA staff member receives an email that appears to be from a trusted supplier requesting updated bank details. Without realising it’s fraudulent, payment is made to the new account. Days later, the real supplier follows up - revealing the scam and a significant financial loss.
❋ What is covered by Cyber InsuranceCyber insurance can help cover the financial loss from the fraudulent transaction, along with investigation costs to identify how the breach occurred. It also provides access to experts who assist in responding to the incident and preventing further damage.
❋ Scenario 2Ransomware AttackA business logs into their system and finds all files, client records, and emails locked. A message appears demanding payment in exchange for restoring access. With operations at a standstill, the business is unable to trade.
❋What Cyber Insurance coversCyber insurance can cover the costs of IT specialists to restore systems and recover data, loss of income during downtime, and in some cases, the ransom payment. It also includes expert support to manage the incident quickly and minimise disruption.
What’s Usually Not Covered by Cyber Insurance
Known or pre-existing issues that were not addressed before the policy startedFailure to maintain basic security standards (e.g. no antivirus, no updates, weak passwords)Intentional or dishonest acts by the business owner or senior managementContractual liabilities where you have agreed to terms beyond your normal legal responsibilityLoss of future profits beyond the defined interruption periodReputational damage only (without a measurable financial loss)Hardware wear and tear or non-cyber-related system failuresWar, terrorism, or state-sponsored cyber attacks (varies by insurer)Fines and penalties that are not legally insurable