Your Cyber Insurance provider can deny your claim under "Act Of War" (Are they learning from Health Insurance Providers?)

After the Ransomware attack Merck was stunned when most of its 30 insurers and reinsurers denied coverage because the policies specifically excluded another class of risk called "an act of war"

https://www.bloomberg.com/news/features/2019-12-03/merck-cyberattack-s-1-3-billion-question-was-it-an-act-of-war

Be aware that your CyberInsurance may not cover "stolen funds" - Example - AIG

Hackers fleeced SS&C out of $5.9 million in 2016 by emailing company employees from spoofed email addresses, and requesting monetary transfers. AIG says its policy stipulates that the insurer will not cover losses stemming from criminal activity.



https://www.cyberscoop.com/aig-cyber-insurance-lawsuit-bec/

You know/have Cyber Insurance , do you have Cyber Catalysts

These are Services the Cyber Insurers consider effective in reducing cyber risk. Here is a list from Marsh.
I am not happy that they are recommending products. I wish they had just recommended threat categories (but, it is a good start). Hopefully, customers will not treat this as a check list to get discounts.


https://www.claimsjournal.com/news/national/2019/09/25/293273.htm