Cyber Insurance Endorsement
A cyber insurance endorsement is a policy amendment that adds or modifies terms addressing specified cyber-related losses or liabilities within an underlying insurance contract.
Definition
A cyber insurance endorsement is an amendment attached to an underlying insurance policy that changes the contract’s treatment of designated cyber-related risks. An endorsement may introduce an insuring agreement, change an existing provision, specify a limit, or modify exclusions and conditions. Its effect is determined together with the declarations and the remaining policy forms.
An endorsement is a contractual form or provision, not a separate description of every event that may be covered. The risks and losses addressed depend on its language and its interaction with the underlying policy.
Structural Components
- Underlying policy: The insurance contract to which the amendment is attached, such as a business owners policy.
- Insuring provisions: Wording identifying the covered event, loss, expense or claim, subject to stated terms.
- Definitions: Contract-specific meanings for terms such as a security event, computer system, data or insured person.
- Limits and retentions: Amounts and thresholds applicable to covered loss, which may include a separate limit or sublimit.
- Conditions and exclusions: Provisions governing notice, response, consent and circumstances outside the coverage provided.
Parameters & Conditions
An endorsement may apply to the insured’s own specified expenses, liability to others, or both. Covered expenses can include particular response or recovery costs when the wording provides for them. Coverage for business interruption, cyber extortion, third-party claims, fraudulent transfers or vendor-related events is not established solely by the presence of the word cyber in an endorsement title.
Limits, deductibles or retentions, waiting periods and reporting requirements can differ by provision. An endorsement may refer to definitions and exclusions in the underlying policy as well as terms in the endorsement itself.
Topic Relationships
Exceptions, Limitations & Boundaries
An endorsement does not necessarily cover all cyber incidents, all expenses or all liability arising from an incident. Coverage depends on the policy’s insuring agreements, definitions, conditions, exclusions and applicable limits.
A cyber endorsement is distinct from a separate standalone cyber policy, although either may address some of the same categories of risk. Neither the form’s name nor its status as an endorsement or standalone contract establishes that it is universally broader or narrower than another form.
A vendor’s own insurance contract is separate from the policy to which an endorsement is attached. An endorsement does not, merely by naming a vendor, establish that the vendor is an insured or that every vendor interruption qualifies for coverage.