Cyber Insurance

Cyber insurance is a policy that pays out when something goes wrong with your computers or the information inside them. It is written for a break-in, stolen customer records, a system locked until you pay, or a member of staff tricked into paying a fake supplier. Your ordinary business insurance covers almost none of that, which is the reason a separate policy exists.

The policy pays for the work that follows the incident more than for the damage you picture. That means the specialists who find how the attacker got in, the lawyers, the cost of telling every affected customer, and the income lost while you cannot trade. Sometimes it covers the ransom, the fine, or a claim a customer makes against you, and each is priced separately. So check which ones your quote includes, because a cheap policy quietly leaves out the expensive parts.

The trouble sits in the conditions, because most insurers now want a second step at every login, so a stolen password alone is not enough. They also want backups you have actually restored a file from, not ones that just run each night. You must report an incident within a set number of hours, often 72, so a claim raised two weeks later can be refused for the delay alone. Some ask you to install security updates within a set time, and none of this is hidden — it simply sits in the part nobody reads.

The application form is a legal document, and that catches people out. If you answer yes to two-step login because you think somebody set it up, and the insurer later finds one account without it, the claim fails. So answer what is true today, and where the honest answer is no, say no and ask what a fix would cost. That conversation is far cheaper than a refused claim, and it is a normal part of any cybersecurity review.

Linkysoft is often asked to read a client's questionnaire before it goes back to the broker, and half the time an answer must change. Backups are the usual one, because the copies run every night, yet nobody has ever put a file back, so nobody knows whether they work. Test a restore before you sign. If your customer data sits in a web application, ask Linkysoft, or whoever maintains it, to prove that test in writing.