As is usual with all types of insurance, there are various types of cover available. Before you take out your cyber insurance policy you need to understand the different types of cover involved and how it will protect your business.
Here is our summary of the key areas and the insurance options available:
Business interruption – this protects against the loss of income for the period immediately following a data breach whilst your business is recovering, repairing, and rectifying its IT assets and data losses.
Credit monitoring services costs – if a data breach does occur, the Information Commissioners Office may impose a requirement for your company to carry out credit monitoring of all customers. If your cyber insurance policy includes this clause, these costs will be covered.
Cyber extortion cover – this covers all expenses related to dealing with an extortion threat including ransom payments.
Data breach notification costs – this will fund all costs associated with notifying customers/all other relevant parties that there has been a data breach.
Forensic costs – covers expenses associated with the hiring of a forensic team to help establish the identity or methods of the hacker.
Public relations costs – if your brand or business operation is at risk following a data breach then the costs of either averting or mitigating this damage can be taken care of with the insurer funding an external crisis management team to assist.
Rectification costs – if your computer network is damaged, stolen, corrupted, misused or copied by a hacker then all costs associated with repair/restoration/replacement of affected parts will be covered.
Regulatory defence and penalty costs – with central governments and public authorities putting more pressure on businesses to protect data, prosecution following a data breach is likely. If you include this clause you will be covered for all legal defence costs, fines and penalties if you are subject to a civil regulatory action.
Media liability - this will cover your legal liability to pay compensation or damages for libel, slander, breach of confidentiality, defamation or trespass following a data breach.
Network security liability- this will cover you if you incur legal liability to pay compensation or damages following failure of your network security to protect against malware, hacking, denial of service attacks and unauthorised use or access.
Privacy liability – this covers your legal liability to pay compensation or damages because of your failure to handle, manage, store, destroy or control personal data for which you are responsible following a data breach, including legal defence costs.