Cyber liability insurance

Receive a cyber liability insurance quote

Name	Product	Cyber Incident Response	Data Extortion	Data Restoration Costs	Cyber Crime	Business Interruption	Levels of cover
upcover Business Insurance							$200,000 $1,000,000 $5,000,000	Get quote View details		loading Fetching your data...

loading

What is cyber liability insurance and how does it work?

Cyber insurance is a form of business insurance that can financially protect businesses in the event of a cyber attack. Cover usually includes:

• First-party coverage for loss or damage that directly affects you or your business (e.g. loss of income from system downtime).
• Third-party coverage for claims made against your business by someone that has been negatively affected by a cyber issue (e.g. legal and compensation costs following a data breach).
• Incident response costs or management to help you quickly recover from an attack.

Cyber liability insurance in Australia provides you with both a safety net to minimise your out-of-pocket expenses when dealing with a cyber attack and access to a team of experts so you can focus on running your business.

What does cyber liability insurance cover?

Make sure you read the PDS

2022 Finder research shows that 23% of Australians can't be bothered reading the product disclosure statement. It may be boring but it's worth it in the long run.

Is cyber Cyber insurance compulsory in Australia?

Cyber insurance in Australia is not compulsory.

But compulsory or not, falling victim to a cyber attack is a very real possibility. Australian Cyber Security Centre data shows that approximately one cybercrime report is made every eight minutes here in Australia alone.

The damage to your business’s income and reputation is not the only financial consequences that are at risk. If you are seen to be negligent in how you protect customers’ data and even in how you respond to a cyber attack, you may also be up for penalties reaching into the millions.

Optus’ September 2022 cyber attack – and Medibank's in October 2022 – are just 2 examples of how much of an impact cybercrimes have on Australians, and the industry is expected to tighten privacy and security laws in the future.

Sure, you might not be as big as Optus, but no matter the size of your business, here are some real risks to consider:

• Data breaches, for example, your customers' information.
• Fraud and theft, for example, getting your online store hacked.
• Business interruptions such as your website getting taken down.

Traditional business insurance may fail to cover these risks or take longer to process.

Cyber risk by the numbers

1. Cybercrime is expected to cost $10.5 Trillion annually by 2025.
2. 62% of small businesses in Australia have experienced some sort of cyber security incident.
3. 60% of these are unable to recover within six months.

How can I compare cyber insurance?

When comparing cyber liability insurance policies, make sure to take the following factors into consideration:

• Identify the risks your business faces. The biggest risk for one business might be completely different to the biggest risk for the next. Make sure the problems your business could face are covered under your policy.
• What sort of cover do you already have? Some of the insurance you already have in place may provide some coverage for cyber risks. Speak to an insurance expert to understand how your business is placed.
• Get the right level of cover. Cyber liability is not a "one size fits all" type of cover. Determine if the amount you're insured for will be enough to cover the costs you'll incur in the event of a data breach and assess whether some of the tailored options will be necessary.
• Know what's excluded. Knowing what is and isn't covered on any insurance policy is always essential. Check your insurer's list of exclusions to prevent any nasty surprises at some stage in the future.
• What about third-party negligence? If, like many businesses, you outsource tasks like data processing or storage to a third party, check whether negligence from that third-party will be covered by your insurance provider.

Talk to a broker about cyber liability insurance

If you are ready to speak with a consultant about different business insurance options available, simply enter your details in the form. Keep reading if you want to learn more about the different types of cover available.

Frequently asked questions

• How much does a data breach cost?

  Depending on what’s lost, the cost of data breach or loss might include:

  • The value of the data itself. If data is corrupted, becomes unusable or is held for ransom, the cost might be the ransom paid, the business lost or other value in the data itself.
  • Potential liability costs. Businesses are often required to take appropriate steps to secure confidential customer information. A failure to do so may lead to lawsuits or penalties.
  • Indemnity costs. If data theft, loss or corruption leads to an inability to carry out your contracted job, you could be liable for related indemnity costs.

  It’s important to note that stolen data can’t be returned the way physical goods can. Once it’s out there, you can only assume that it’s been replicated and that anyone might have access to it. In such circumstances, you might have no choice but to take drastic and expensive steps.

• Can insurance cover lost or stolen data?

  Yes. However, it depends on the type of breach or loss, the type of insurance and your situation. There are three main types of business insurance, each of which might cover a different situation.

  

  Loss and damage business insurance

  This is the type of cover that might pay for a burned building, storm damage, or the destruction of data. Some policies might exclude cover for the loss of digital or electronic data, while others might offer it as an optional extra for a specific sum insured, and some might include it automatically. It can be worth checking how a business insurance policy covers data.

  

  Professional indemnity insurance

  This type of cover protects your business against claims for loss or damage arising from the provision of your professional services. For example, if you collect confidential customer information that is hacked and used to commit identity theft and the customers sue you for the costs. You might find "cyber cover" excluded, offered as an optional extension or as an automatic inclusion depending on the policy.

  

  Public and product liability insurance

  This can cover you against unintentional loss caused to others, potentially including invasion of privacy, libel, slander, blackmail and other types of non-physical loss that may result from data theft. It's similar, but not identical, to professional indemnity insurance. The exact cover may vary between policies, and you'll often find exclusions for computer viruses and other "preventable" breaches.

• Is cyber liability insurance included in my business insurance?

  Some insurers may offer cyber insurance bundled with other types of business insurance, while others may only have it available as a standalone option. Make sure to review your policy documents to ensure you’re covered for everything you might need.

• Will these policies protect me in all situations?

  The unfortunate truth is that 100% system security is impossible. If the day comes that your system has been compromised you’ll probably want to:

  • Be able to show that you’ve taken all appropriate precautions against hacking in order to protect yourself from penalties and lawsuits.
  • Have the appropriate business insurance to cover legal, compensatory and other expenses.

  If you lack the technical expertise to ensure your system security, it’s a good idea to consult an expert. If you’re uncertain about your legal obligations to avoid liability, it’s wise to consult legal counsel.

• Who is eligible for cyber insurance?

  In order to determine your eligibility, some cyber liability insurers will carry out a cyber insurance risk assessment. This could be in the form of an online questionnaire or a detailed analysis conducted over several weeks. As a minimum, policyholders will need to meet basic IT security standards to qualify for cyber insurance. This can include up-to-date antivirus software and a regular backup of business data.

• What types of industries need cyber insurance?

  Industries where cyber liability cover might be considered include:

  • Healthcare/medical
  • Financial Services
  • Retail/wholesale
  • Manufacturing
  • Real estate
  • Construction
  • Telecommunications or internet services
  • Travel sector
  • Education
  • Law firms
  • Insurance brokers
  • Telemarketing

• How can cyber liability insurance mitigate risk?

  Cyber liability insurance is just one piece of the puzzle when it comes to mitigating risk. Preventative methods should be your first step, but even with all the preparation in the world, it’s still possible for businesses to fall victim to a cyber attack.
  Cyber insurance mitigates risk by helping to cover the cost for your business to recover from an attack.