PRACTICE NOTES
Silent (or non-affirmative) cyber coverage, and the systemic risk it presents to the insurance market, have been of significant regulatory concern in recent years.
This Practice Note explores silent cyber within professional indemnity insurance (PII), the regulatory concerns it has prompted, and how the market has responded so far. It also reviews the contrasting approaches taken by the International Underwriting Association (IUA) and the London Market Association (LMA), and what those positions mean for underwriting practice and minimum terms for regulated professions. Cyber risks cover any exposure to financial loss, operational disruption or reputational harm suffered by an organisation resulting from the failure, unauthorised use or mistaken operation of its IT systems. Such exposures may arise from malicious conduct (including cyberattacks) and from non-malicious events (for example, system outages or accidental data loss). The frequency and visibility of cyber incidents have risen
Insurance & Reinsurance