General Insurance Article - Research reveals major flaws in commercial cyber insurance


Mactavish, the UK’s leading expert on insurance governance, says there has been a surge in businesses buying specialist cyber insurance, but it warns the immaturity of this market means there are significant flaws in the majority of these policies.

 The company, which advises organisations of all sizes on their insurance requirements, and which has worked with a quarter companies in the FTSE 100, has recently launched a new Cyber Risk Consulting Practice. This helps clients to understand their exposure to cyber risks, and to source appropriate insurance cover for these. It has recently reviewed dozens of ‘off-the-shelf’ cyber insurance policies and identified seven significant common flaws:
 
 1. Cover can be limited to events triggered by attacks or unauthorised activity – excluding cover for issues caused by accidental errors or omissions
 2. Data breach costs can be limited – e.g. covering only costs that the business is strictly legally required to incur (as opposed to much greater costs which would be incurred in practice)
 3. Systems interruption cover can be limited to only the brief period of actual network interruption, providing no cover for the more significant knock-on revenue impact in the period after IT systems are restored but the business is still disrupted
 4. Cover for systems delivered by outsourced service providers (many businesses’ most significant exposure) varies significantly and is often limited or excluded
 5. Exclusions for software in development or systems being rolled out are common and can be unclear or in the worst cases exclude events relating to any recently updated systems
 6. Where contractors cause issues (e.g. a data breach) but the business is legally responsible, policies will sometimes not respond
 7. Notification requirements are often complex and onerous

 Bruce Hepburn, CEO of Mactavish said: “There are a number of new cyber insurance policies being launched, but despite a sharp increase in cyber incidents this market is very immature and in many respects untested. Perhaps some of these policies have been rushed to market by insurers eager to capitalise on the growing cyber risks facing organisations, and their desire to spend significant amounts of money to protect themselves against this.
 
 “Very few claims have been made on these new cyber insurance policies, but my bet is that many will be disputed, or settlements will be much lower than clients expected. However, this can be avoided if organisations first understand the cyber risks they face, and then secure a bespoke policy to meet their needs.”
  

Back to Index


Similar News to this Story

PPI still the number one complained about product to the FCA
During the second half of 2018 (2018 H2), complaints decreased by 5%, falling from 4.13m to 3.91m. This is the first time the number of complaints has
The FCA sets out its priorities for the coming year
The Financial Conduct Authority (FCA) has today published its Business Plan for 2019/20, which outlines the key priorities for the coming year.
Over Confident Over Fifty and Over the Limit
New research from Direct Line Motor Insurance reveals the worrying problem of drink driving amongst over 55s. More than 1.6 million motorists over the

Site Search

Exact   Any  

Latest Actuarial Jobs

Actuarial Login

Email
Password
 Jobseeker    Client
Reminder Logon

APA Sponsors

Actuarial Jobs & News Feeds

Jobs RSS News RSS

WikiActuary

Be the first to contribute to our definitive actuarial reference forum. Built by actuaries for actuaries.