Written and reviewed by a licensed insurance professional — WJB Services, Inc. dba Bollinsure Insurance Services · CA DOI License #6013787
Glossary

Cyber Insurance Glossary

Policy jargon translated into plain English so cyber coverage is easier to compare.

How to use this glossary

Translate terms into claim outcomes

Cyber terms matter because they decide which costs are paid, which sublimit applies, which procedures must be followed, and where another policy may need to coordinate. These definitions focus on practical buying and claim questions.

Term

Ransomware

Malware or attacker activity that blocks access to systems or data until a demand is paid.

Full definition →
Term

Data Breach

Unauthorized access, acquisition, or disclosure of sensitive information such as PII, PHI, payment data, or confidential client records.

Full definition →
Term

Social Engineering

Manipulation of an employee into sending money, credentials, or sensitive information.

Full definition →
Term

Business Email Compromise

A fraud scheme where attackers use email impersonation or mailbox access to redirect payments, invoices, or wire transfers.

Full definition →
Term

Network Interruption

Lost income and extra expense when business systems are unavailable because of a covered cyber event.

Full definition →
Term

Cyber Extortion

A threat to publish, destroy, encrypt, or misuse data unless money or another concession is provided.

Full definition →
Term

First-Party Coverage

Cyber coverage for losses the insured business suffers directly.

Full definition →
Term

Third-Party Coverage

Cyber liability coverage for claims by customers, vendors, partners, regulators, or others alleging harm from a privacy or security failure.

Full definition →
Term

Claims-Made Policy

Coverage that responds when a claim is first made and reported during the policy period, subject to reporting rules and retroactive dates.

Full definition →
Term

Retroactive Date

The date after which acts, incidents, or events must occur to be eligible for coverage under a claims-made policy.

Full definition →
Term

Continuity Date

A date used in claims-made policies to evaluate prior knowledge, continuity of coverage, or related acts across renewals.

Full definition →
Term

MFA

Multi-factor authentication, requiring a second verification factor beyond a password.

Full definition →
Term

Defense Within Limits

A policy structure where legal defense costs reduce the available limit of insurance.

Full definition →
Term

Hammer Clause

A settlement provision that can limit coverage if the insured refuses a carrier-recommended settlement.

Full definition →
Term

Surplus Lines

Non-admitted insurance used when admitted markets cannot offer suitable terms, appetite, limits, or pricing.

Full definition →
Term

Admitted vs Non-Admitted

Admitted carriers are licensed and regulated by the state; non-admitted markets provide surplus-lines options for harder-to-place risks.

Full definition →
Term

Computer Fraud

Coverage for direct financial loss caused by unauthorized computer instructions or fraudulent system access.

Full definition →
Term

Privacy Liability

Third-party coverage for claims or regulatory proceedings arising from privacy rights violations or data mishandling.

Full definition →
Term

Waiting Period

The time that must pass before business interruption coverage begins.

Full definition →

Need a cyber pricing indication?

We will turn the research into a real market comparison for your business.

Get my indication →
How to use this hub

Use Cyber Insurance Glossary as a decision map, not just a directory

This hub is meant to help a buyer compare cyber insurance with context. Each coverage term page should answer what the exposure is, which coverage details matter, what underwriting information is needed, and where a proposal can look stronger than it really is because of sublimits, exclusions, or claim conditions.

The best cyber placement process starts broad, then gets specific. First identify the likely claim scenarios, then compare markets, limits, retentions, sublimits, and response resources. That makes the hub useful for both quick orientation and a deeper quote review.

Use the hub to decide which pages deserve a closer read before a quote is requested. The practical goal is simple: make sure the buyer understands exposure, market fit, and coverage tradeoffs before price becomes the only decision point.

Start with exposure

Identify data, systems, payment workflows, vendors, contract requirements, and downtime tolerance before comparing quotes.

Then compare terms

Review breach response, ransomware, restoration, business interruption, dependent systems, cybercrime, privacy liability, and regulatory defense.

Then choose markets

A fast quote is useful, but the final recommendation should also consider carrier appetite, claim resources, financial strength, state availability, and final forms.

Questions this hub should answer
What could go wrong?
Ransomware, business email compromise, privacy breach, vendor outage, system failure, regulatory inquiry, or customer allegation.
What pays?
The answer may involve first-party cyber, third-party liability, cybercrime, tech E&O, professional liability, property, crime, or general liability.
How much is enough?
Limit selection should consider response costs, lost income, fraud exposure, record count, contracts, and the insured's tolerance for retained risk.
What needs improvement?
MFA, backups, endpoint protection, patching, vendor access, payment verification, incident-response planning, and documentation often drive underwriting.
Review discipline

What we document for Cyber Insurance Glossary

A complete cyber recommendation should leave a clean trail: why the limit was selected, which markets were compared, what controls affected eligibility, which sublimits were accepted, and what the insured should improve before renewal. That record matters because cyber claims are operational events, not just insurance paperwork.

We also separate what is known from what still needs underwriting confirmation. Carrier appetite, rating, issuing paper, state availability, subjectivities, taxes, fees, and final forms can change before binding. The buyer should understand those moving parts before treating any indication as final.