General Insurance Article - Eight flaws in cyber insurance policies to refuse pay outs


Mactavish, the UK’s leading expert on insurance governance, has challenged insurers and brokers to guarantee that eight common flaws it has identified in policies will never be used as reasons to refuse pay-outs on cyber insurance claims.

 Several insurers and brokers have denied that the flaws – discovered by Mactavish in analysis of dozens of ‘off-the-shelf’ cyber insurance policies - even exist.

 Mactavish has now challenged the Association of British Insurers, brokers and insurers in an open letter to state publicly on behalf of its members that no claims will be rejected because of these flaws.

 Bruce Hepburn, Chief Executive Officer, Mactavish, commented: “Some insurers and brokers were quick to denounce our findings.

 So we are challenging them to state publicly that they will never use the flaws we identified as the basis to turn down claims.

 “These flaws are a consequence of the immaturity of the specialist cyber insurance market. But this is a rapidly expanding market and it is essential that the industry addresses these issues if the available policies are to meet the needs of companies seeking cover.”

 The eight flaws were outlined in the Mactavish Cyber Risk & Insurance Report, published in November. The flaws include:
 1. Cover can be limited to events triggered by attacks or unauthorised activity – excluding cover for issues caused by accidental errors or omissions
 2. Data breach costs can be limited – e.g. covering only costs that the business is strictly legally required to incur (as opposed to much greater costs which would be incurred in practice)
 3. Systems interruption cover can be limited to only the brief period of actual network interruption, providing no cover for the more significant knock-on revenue impact in the period after IT systems are restored but the business is still disrupted
 4. Cover for systems delivered by outsourced service providers (many businesses’ most significant exposure) varies significantly and is often limited or excluded
 5. Exclusions for software in development or systems being rolled out are common and can be unclear or in the worst cases exclude events relating to any recently updated systems
 6. Where contractors cause issues (e.g. a data breach) but the business is legally responsible, policies will sometimes not respond
 7. Notification requirements are often complex and onerous
 8. Businesses are forced to choose IT, legal or PR specialists appointed by their insurer.

  

Back to Index


Similar News to this Story

Sleighing the risks by giving Santa the insurance he needs
While you might be the most magical employer in the world, we know that even you aren’t immune to the risks of running a global delivery service! From
Diversity improving in insurance and long term savings
Key figures from the Association of British Insurers’ latest Diversity, Equity and Inclusion (DEI) data collection highlight the work of insurers and
Almost a third of homeowners have been victims of burglaries
Research commissioned by Co-op Insurance reveals that almost one in three (29%) homeowners have been the victims of theft from their home. The member-

Site Search

Exact   Any  

Latest Actuarial Jobs

Actuarial Login

Email
Password
 Jobseeker    Client
Reminder Logon

APA Sponsors

Actuarial Jobs & News Feeds

Jobs RSS News RSS

WikiActuary

Be the first to contribute to our definitive actuarial reference forum. Built by actuaries for actuaries.